CVE-2015-8660

MediumPublished

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users...

Published: Dec 28, 2015
Updated: Aug 6, 2024
Assigning CNA: redhat
Evidence observed: Jan 5, 2016

Primary CVSS

6.7/ 10Medium

nvd · CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

22.2%

Moderate · next 30 days

Percentile: 97.6%
Model date: Oct 13, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Module

Overlayfs Privilege EscalationModule
modules/exploits/linux/local/overlayfs_priv_esc.rb
Metasploit Framework modules
ExploitEvidence observed: Sep 26, 2026Revision: c3e1fbccdfb4Related tool
Declared conditions
- platform: Linux($.exploit_linux/local/overlayfs_priv_esc.platform)
- verification: check_declared($.exploit_linux/local/overlayfs_priv_esc.check)

CVE-2015-8660PoC
Student research project analyzing CVE-2015-8660 overlayFS kernel vulnerability, including explanation, potential effects, and a crafted exploit demonstration for privilege escalation on Linux systems.
CVE-2015-8660

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.