CVE-2016-1575: Canonical Ubuntu Core

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.

Affected products

• Canonical Ubuntu Core: version 15.04 only
• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 15.10 only; version 16.04 only; version 16.10 only
• Canonical Ubuntu Touch: version 15.04 only
• Linux Linux Kernel: up to and including 4.5.2

Published 2016-05-02. Last modified 2026-06-17.