fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service (excessive filesystem updating) on systems that had atime disabled via a "mount -o remount" command within a user namespace.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 18, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade perfUpgrade kernel-tools | Jun 17, 2020 | Aug 18, 2014 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Dec 18, 2019 | Aug 18, 2014 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Aug 18, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-34-powerpc64-smpUpgrade linux-image-3.13.0-34-powerpc-e500Upgrade linux-image-3.13.0-34-lowlatencyUpgrade linux-image-3.13.0-34-powerpc-e500mcUpgrade linux-image-3.13.0-34-generic-lpaeUpgrade linux-image-3.13.0-34-genericUpgrade linux-image-3.13.0-34-powerpc-smpUpgrade linux-image-3.13.0-34-powerpc64-emb | Nov 8, 2024 | Aug 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub