CVE:CVE-2016-1575
CNNVD:CNNVD-201602-455
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 4.5.2及之前版本的overlayfs实现过程中存在安全漏洞，该漏洞源于程序没有正确保存POSIX ACL xattr数据。本地攻击者可借助group-writable setgid目录利用该漏洞获取权限。
solution:Upgrade linux linux_kernel to a higher version than 4.5.2,and avoid the version (,4.5.2]; Upgrade canonical ubuntu_core to a higher version than 15.04,and avoid the version 15.04; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,16.04,16.10,and avoid the version 12.04,14.04,15.10,16.04,16.10; Upgrade canonical ubuntu_touch to a higher version than 15.04,and avoid the version 15.04