Name: CVE-2021-3732: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2022-03-07T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-3732, CWE-200, CVSS 5.5, EPSS 0.00353

A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with OverlayFS. This flaw allows a local user to gain access to hidden files that should not be accessible.

CVSS Details

CVSS 3.1 Base Score: 5.5
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade kernel-tools-libs-devel	May 4, 2022	Mar 10, 2022
Amazon Linux Ami 2	—	Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade microvm-kernel-headersUpgrade kernelUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade microvm-kernel-debuginfoUpgrade microvm-kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-livepatch-4.14.246-187.474Upgrade microvm-kernel-debuginfo-common-x86_64Upgrade microvm-kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfo	Sep 16, 2021	Sep 16, 2021
Amazon_linux	—	Upgrade kernel	Oct 5, 2021	Sep 16, 2021
Centos_linux	—	Upgrade kernelUpgrade kernel-rt	Nov 10, 2021	Nov 9, 2021
Debian	—	Upgrade linux	Nov 29, 2021	Nov 29, 2021
Oracle_linux	—	Upgrade kernel-uekUpgrade kernel	Nov 18, 2021	Aug 12, 2021
Redhat_linux	—	Upgrade kernel-rtUpgrade kernelNo solution exists	Nov 10, 2021	Nov 9, 2021
Suse	—	Upgrade kernel-vanillaUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade dlm-kmp-preemptUpgrade kernel-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade dtb-amdUpgrade reiserfs-kmp-preemptUpgrade kernel-default-manUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-preemptUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-debugUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-vanilla-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-preempt-optionalUpgrade kernel-docsUpgrade dtb-apmUpgrade kernel-preempt-extraUpgrade kernel-default-kgraftUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kselftests-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade dtb-alUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade kernel-preemptUpgrade dtb-armUpgrade kernel-azure-optionalUpgrade kernel-vanilla-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-vanilla-baseUpgrade dtb-zteUpgrade cluster-md-kmp-preemptUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade kernel-zfcpdump-manUpgrade dtb-alteraUpgrade dtb-caviumUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-preempt-develUpgrade kernel-debug-baseUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade kernel-64kb-devel	Sep 16, 2021	Sep 16, 2021
Ubuntu	—	Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1124-azureUpgrade linux-image-5.4.0-1055-gcpUpgrade linux-image-4.4.0-1118-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-89-genericUpgrade linux-image-5.11.0-1021-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-89-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.11.0-1020-azureUpgrade linux-image-azure-edgeUpgrade linux-image-dell300xUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1058-awsUpgrade linux-image-5.4.0-89-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-ibmUpgrade linux-image-4.4.0-239-genericUpgrade linux-image-5.4.0-1048-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1062-azureUpgrade linux-image-4.15.0-1081-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-159-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.11.0-38-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-239-lowlatencyUpgrade linux-image-5.11.0-1020-awsUpgrade linux-image-5.10.0-1050-oemUpgrade linux-image-gke-5.4Upgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-5.13.0-1014-oemUpgrade linux-image-awsUpgrade linux-image-5.4.0-1045-raspiUpgrade linux-image-5.4.0-1056-gcpUpgrade linux-image-aws-hweUpgrade linux-image-5.11.0-1021-raspiUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-1112-awsUpgrade linux-image-5.11.0-38-genericUpgrade linux-image-5.4.0-1056-oracleUpgrade linux-image-4.15.0-1109-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1113-snapdragonUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1020-bluefieldUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.11.0-38-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1028-dell300xUpgrade linux-image-snapdragonUpgrade linux-image-5.11.0-1020-oracleUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1025-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oemUpgrade linux-image-5.4.0-1054-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-1117-awsUpgrade linux-image-4.15.0-159-lowlatencyUpgrade linux-image-5.11.0-38-generic-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1096-raspi2Upgrade linux-image-5.4.0-1006-ibmUpgrade linux-image-5.11.0-1018-kvmUpgrade linux-image-4.4.0-1155-awsUpgrade linux-image-azureUpgrade linux-image-5.11.0-1021-raspi-nolpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-159-generic-lpaeUpgrade linux-image-4.15.0-1100-kvmUpgrade linux-image-generic-64k	Sep 30, 2021	Sep 16, 2021
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Mar 7, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence