CVE-2020-16120

A flaw was found in the User namespace on an overlay filesystem in the Linux Kernel, Where a file with no access privilege was able to copy the file to a user defined mount point. An attacker with a special user privilege locally may lead to a kernel information leak problem.

Mitigation

Red Hat feels this flaw needs a number of conditions in place for the attacker to exploit, and the mitigation for this issue is to avoid a target file t existing on an overlay filesystem, accessible in the namespace, which is writable by the exploiting target.