The do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAP_SYS_ADMIN capability for do_remount_sb calls that change the root filesystem to read-only, which allows local users to cause a denial of service (loss of writability) by making certain unshare system calls, clearing the / MNT_LOCKED flag, and making an MNT_FORCE umount system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Oct 13, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 13, 2014 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Oct 13, 2014 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 3, 2017 | Oct 13, 2014 |
| Suse | — | Upgrade kernel-default | Dec 18, 2015 | Oct 13, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-68-versatileUpgrade linux-image-3.16.0-25-powerpc-e500mcUpgrade linux-image-2.6.32-68-serverUpgrade linux-image-2.6.32-68-386Upgrade linux-image-3.2.0-72-genericUpgrade linux-image-2.6.32-68-generic-paeUpgrade linux-image-3.2.0-72-virtualUpgrade linux-image-2.6.32-68-virtualUpgrade linux-image-2.6.32-68-sparc64Upgrade linux-image-3.2.0-72-powerpc64-smpUpgrade linux-image-3.2.0-72-generic-paeUpgrade linux-image-3.16.0-25-powerpc64-embUpgrade linux-image-3.13.0-40-powerpc64-smpUpgrade linux-image-2.6.32-68-lpiaUpgrade linux-image-3.16.0-25-lowlatencyUpgrade linux-image-3.16.0-25-generic-lpaeUpgrade linux-image-3.16.0-25-genericUpgrade linux-image-2.6.32-68-genericUpgrade linux-image-3.13.0-40-lowlatencyUpgrade linux-image-3.13.0-40-genericUpgrade linux-image-3.2.0-72-highbankUpgrade linux-image-2.6.32-68-sparc64-smpUpgrade linux-image-2.6.32-68-powerpc64-smpUpgrade linux-image-3.13.0-40-generic-lpaeUpgrade linux-image-3.16.0-25-powerpc-smpUpgrade linux-image-2.6.32-68-preemptUpgrade linux-image-2.6.32-68-ia64Upgrade linux-image-2.6.32-68-powerpcUpgrade linux-image-3.2.0-1456-omap4Upgrade linux-image-3.13.0-40-powerpc-smpUpgrade linux-image-2.6.32-372-ec2Upgrade linux-image-3.2.0-72-omapUpgrade linux-image-3.13.0-40-powerpc-e500mcUpgrade linux-image-3.13.0-40-powerpc64-embUpgrade linux-image-3.16.0-25-powerpc64-smpUpgrade linux-image-2.6.32-68-powerpc-smpUpgrade linux-image-3.13.0-40-powerpc-e500Upgrade linux-image-3.2.0-72-powerpc-smp | Nov 8, 2024 | Oct 13, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub