The do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAP_SYS_ADMIN capability for do_remount_sb calls that change the root filesystem to read-only, which allows local users to cause a denial of service (loss of writability) by making certain unshare system calls, clearing the / MNT_LOCKED flag, and making an MNT_FORCE umount system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Oct 13, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 13, 2014 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Oct 13, 2014 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 3, 2017 | Oct 13, 2014 |
| Suse | — | Upgrade kernel-default | Dec 18, 2015 | Oct 13, 2014 |
| Ubuntu | — | Upgrade linux-image-3.16.0-25-lowlatencyUpgrade linux-image-3.2.0-72-powerpc64-smpUpgrade linux-image-2.6.32-68-lpiaUpgrade linux-image-3.2.0-72-generic-paeUpgrade linux-image-3.2.0-72-genericUpgrade linux-image-2.6.32-68-serverUpgrade linux-image-2.6.32-68-versatileUpgrade linux-image-2.6.32-68-sparc64Upgrade linux-image-3.16.0-25-powerpc64-embUpgrade linux-image-3.16.0-25-powerpc-e500mcUpgrade linux-image-2.6.32-68-generic-paeUpgrade linux-image-2.6.32-68-virtualUpgrade linux-image-3.2.0-72-virtualUpgrade linux-image-2.6.32-68-386Upgrade linux-image-3.13.0-40-powerpc64-smpUpgrade linux-image-3.2.0-72-omapUpgrade linux-image-2.6.32-68-powerpcUpgrade linux-image-3.2.0-72-powerpc-smpUpgrade linux-image-3.13.0-40-powerpc64-embUpgrade linux-image-3.2.0-72-highbankUpgrade linux-image-2.6.32-68-powerpc-smpUpgrade linux-image-3.16.0-25-genericUpgrade linux-image-3.16.0-25-powerpc-smpUpgrade linux-image-3.16.0-25-powerpc64-smpUpgrade linux-image-3.13.0-40-powerpc-e500Upgrade linux-image-3.13.0-40-powerpc-smpUpgrade linux-image-2.6.32-68-sparc64-smpUpgrade linux-image-2.6.32-372-ec2Upgrade linux-image-3.13.0-40-generic-lpaeUpgrade linux-image-3.16.0-25-generic-lpaeUpgrade linux-image-2.6.32-68-genericUpgrade linux-image-2.6.32-68-powerpc64-smpUpgrade linux-image-3.13.0-40-lowlatencyUpgrade linux-image-3.13.0-40-powerpc-e500mcUpgrade linux-image-3.13.0-40-genericUpgrade linux-image-2.6.32-68-ia64Upgrade linux-image-2.6.32-68-preemptUpgrade linux-image-3.2.0-1456-omap4 | Nov 8, 2024 | Oct 13, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub