ACTIVELY EXPLOITED
CVE-2021-3493: Linux Kernel Privilege Escalation Vulnerability
| Vendor | Linux |
|---|---|
| Product | Kernel |
| Actively exploited | Yes |
| Added to CISA KEV | 20 Oct 2022 |
| CISA federal deadline | 10 Nov 2022 |
| Weakness (CWE) | CWE-862 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.
SOURCES
Other Linux flaws
- CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability
- CVE-2026-53266: Linux Kernel Out-of-Bounds Write Vulnerability
- CVE-2025-39964: Linux Kernel Race Condition Vulnerability
- CVE-2025-39682: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
- CVE-2026-53362: Linux Kernel Unspecified Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.