PT-2015-5214 · Linux+2 · Linux Kernel+2

Rebel · Published 2015-02-17 · Updated 2025-11-29 · CVE-2015-1328

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions linux (aka Linux kernel) versions prior to 3.19.0-21.21 in Ubuntu through 15.04

Description The issue is related to the overlayfs implementation, which does not properly check permissions for file creation in the upper filesystem directory. This allows local users to obtain root access by leveraging a configuration in which overlayfs is permitted in an arbitrary mount namespace.

Recommendations For versions prior to 3.19.0-21.21 in Ubuntu through 15.04, update to a version that includes the fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

ALSA-2025_16880

ALT-PU-2015-1186

ALT-PU-2015-1849

CVE-2015-1328

USN-2640-1

USN-2641-1

USN-2642-1

USN-2643-1

USN-2643-2

USN-2644-1

USN-2644-2

USN-2645-1

USN-2646-1

USN-2647-1

Affected Products

Alt Linux

Linux Kernel

Ubuntu

References · 32

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/x1ns4n3/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://github.com/elit3pwner/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://github.com/0x1ns4n3/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://exploit-db.com/exploits/37292 · Exploit
• 🔥 https://exploit-db.com/exploits/37293 · Exploit
• 🔥 http://exploit-db.com/exploits/40688 · Exploit
• 🔥 https://exploit-db.com/exploits/40688 · Exploit
• https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1328.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2645-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2643-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2645-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2643-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1328 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-1328 · Vendor Advisory