The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernelUpgrade kernel-docUpgrade kernel-PAE-devel | Dec 1, 2016 | Jul 9, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 9, 2008 |
| Suse | — | Upgrade kernel-bigsmpUpgrade kernel-defaultUpgrade kernel-xenUpgrade kernel-xenpaeUpgrade suse-releaseUpgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-ppc64Upgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-kdump | Feb 17, 2015 | Jul 9, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.24-19-lpiaUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.24-19-rtUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.24-19-virtualUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.24-19-itaniumUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.15-52-mckinley-smp | Nov 8, 2024 | Jul 9, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub