kevmap

Coverage › CVE-2021-3493

CVE-2021-3493 Unmapped

Linux Kernel Privilege Escalation Vulnerability

Vendor / product
Linux — Kernel
Description (CISA)
The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.
Added to KEV
2022-10-20
Due date
2022-11-10
Required action
Apply updates per vendor instructions.
Known ransomware use
Unknown
CWE
CWE-862
CISA notes
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c03e2cda4a584cadc398e8f6641ca9988a39d52
https://nvd.nist.gov/vuln/detail/CVE-2021-3493
Elsewhere
cve.org · NVD · CISA KEV · JSON

ATT&CK techniques

No public source states how this vulnerability is exploited in ATT&CK terms.

The only authoritative CVE → ATT&CK mapping in the open — CTID's Mappings Explorer, pinned to a KEV snapshot of 2025-07-28 and ATT&CK 16.1 — does not include CVE-2021-3493. CISA's catalogue carries no technique field. kevmap does not infer techniques from the CWE (CWE-862) — here is why — and does not guess.

This page will change state automatically if a mapping is published. What is shown above is everything CISA publishes about the entry.