{"id":"CVE-2012-0055","aliases":["EUVD-2012-0093","GHSA-9h57-rmgj-c639"],"status":"published","title":"OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is...","description":"OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01241,"percentile":0.69364,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-862"],"published":"2020-02-19T17:28:53Z","modified":"2026-06-16T23:36:35Z","exploits":[{"source":"exploitdb","id":"EDB-36571","title":"OverlayFS inode Security Checks - 'inode.c' Local Security Bypass","type":"local","platform":"linux","date":"2012-01-17","verified":true,"url":"https://www.exploit-db.com/exploits/36571"}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"linux","product":"linux_kernel"},{"vendor":"linux kernel","product":"overlayfs"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2012/01/17/11","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-0055","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"https://access.redhat.com/security/cve/cve-2012-0055","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1363-1","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1364-1","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1384-1","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/linux/+bug/915941","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0055"},{"url":"https://github.com/advisories/GHSA-9h57-rmgj-c639"}],"sources":{"cve":[{"id":"CVE-2012-0055","description":"OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.","status":"published","published":"2020-02-19T17:28:53Z","modified":"2024-08-06T18:09:17.246Z","updated_at":"2026-11-02T14:34:52.981189Z"}],"euvd":[{"id":"EUVD-2012-0093","description":"OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.","status":"published","published":"2020-02-19T17:28:53Z","modified":"2024-08-06T18:09:17Z","updated_at":"2026-11-03T01:56:23.098352Z"}],"ghsa":[{"id":"GHSA-9h57-rmgj-c639","title":"OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is...","description":"OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.","status":"published","published":"2022-04-23T00:40:45Z","modified":"2023-01-27T05:02:11Z","updated_at":"2026-11-02T14:42:02.011098Z"}],"nvd":[{"id":"CVE-2012-0055","description":"OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.","status":"published","published":"2020-02-19T18:15:09.853Z","modified":"2026-06-16T23:36:35.387Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:02:18.043773Z"}]}}