CVE-2018-16597: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem.

Affected products

• Linux Linux Kernel: before 4.8 (fixed in 4.8)
• Netapp Active Iq Performance Analytics Services: affected versions not specified
• Netapp Element Software: affected versions not specified
• Opensuse Leap: version 42.3 only

Published 2018-09-21. Last modified 2026-06-17.