CVE-2018-16597

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-09-21 · updated 2026-06-17
Weakness: CWE-863

Description

An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem.

Affected products

Linux kernel: before 4.8 — fixed in 4.8
NetApp Active Iq Performance Analytics Services: all versions
NetApp Element Software: all versions
openSUSE Leap: 42.3

How to fix

Upgrade to a fixed version: Linux kernel 4.8. Check the vendor advisory for mitigations.

References

http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html
http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
http://www.securityfocus.com/bid/105394
https://bugzilla.suse.com/show_bug.cgi?id=1106512
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c0ca3d70e8d3cf81e2255a217f7ca402f5ed0862
https://seclists.org/bugtraq/2019/Jul/33
https://security.netapp.com/advisory/ntap-20190204-0001/
https://support.f5.com/csp/article/K22691834
http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html
http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
http://www.securityfocus.com/bid/105394
https://bugzilla.suse.com/show_bug.cgi?id=1106512

Get alerted when CVE-2018-16597 or the next vulnerability affects your stack