description: An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a capable file from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system.
problem types: CWE-281
affected:
{
product: kernel
vendor: n/a
versions:
status: affected, version: all versions up to, including, kernel 5.17
}