The do_remount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain the MNT_LOCK_READONLY bit across a remount of a bind mount, which allows local users to bypass an intended read-only restriction and defeat certain sandbox protection mechanisms via a "mount -o remount" command within a user namespace.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 18, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-debug | Jun 17, 2020 | Aug 18, 2014 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel | Dec 18, 2019 | Aug 18, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-obs-build | Dec 18, 2015 | Aug 18, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-34-powerpc-smpUpgrade linux-image-3.13.0-34-generic-lpaeUpgrade linux-image-3.13.0-34-powerpc64-embUpgrade linux-image-3.13.0-34-powerpc64-smpUpgrade linux-image-3.13.0-34-genericUpgrade linux-image-3.13.0-34-powerpc-e500mcUpgrade linux-image-3.13.0-34-lowlatencyUpgrade linux-image-3.13.0-34-powerpc-e500 | Nov 8, 2024 | Aug 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub