CVE-2021-3493
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
49.2%
98.8th percentile
CISA KEV
Listed
Added 2022-10-20 · patch by 2022-11-10
Weakness / dates
—
Published — · modified —
Description
The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.