The do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAP_SYS_ADMIN capability for do_remount_sb calls that change the root filesystem to read-only, which allows local users to cause a denial of service (loss of writability) by making certain unshare system calls, clearing the / MNT_LOCKED flag, and making an MNT_FORCE umount system call.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Oct 13, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 13, 2014 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Oct 13, 2014 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 3, 2017 | Oct 13, 2014 |
| Suse | — | Upgrade kernel-default | Dec 18, 2015 | Oct 13, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-68-versatileUpgrade linux-image-3.16.0-25-powerpc-e500mcUpgrade linux-image-2.6.32-68-serverUpgrade linux-image-2.6.32-68-386Upgrade linux-image-3.2.0-72-genericUpgrade linux-image-2.6.32-68-generic-paeUpgrade linux-image-3.2.0-72-virtualUpgrade linux-image-2.6.32-68-virtualUpgrade linux-image-2.6.32-68-sparc64Upgrade linux-image-3.2.0-72-powerpc64-smpUpgrade linux-image-3.2.0-72-generic-paeUpgrade linux-image-3.16.0-25-powerpc64-embUpgrade linux-image-3.13.0-40-powerpc64-smpUpgrade linux-image-2.6.32-68-lpiaUpgrade linux-image-3.16.0-25-lowlatencyUpgrade linux-image-3.16.0-25-generic-lpaeUpgrade linux-image-3.16.0-25-genericUpgrade linux-image-2.6.32-68-genericUpgrade linux-image-3.13.0-40-lowlatencyUpgrade linux-image-3.13.0-40-genericUpgrade linux-image-3.2.0-72-highbankUpgrade linux-image-2.6.32-68-sparc64-smpUpgrade linux-image-2.6.32-68-powerpc64-smpUpgrade linux-image-3.13.0-40-generic-lpaeUpgrade linux-image-3.16.0-25-powerpc-smpUpgrade linux-image-2.6.32-68-preemptUpgrade linux-image-2.6.32-68-ia64Upgrade linux-image-2.6.32-68-powerpcUpgrade linux-image-3.2.0-1456-omap4Upgrade linux-image-3.13.0-40-powerpc-smpUpgrade linux-image-2.6.32-372-ec2Upgrade linux-image-3.2.0-72-omapUpgrade linux-image-3.13.0-40-powerpc-e500mcUpgrade linux-image-3.13.0-40-powerpc64-embUpgrade linux-image-3.16.0-25-powerpc64-smpUpgrade linux-image-2.6.32-68-powerpc-smpUpgrade linux-image-3.13.0-40-powerpc-e500Upgrade linux-image-3.2.0-72-powerpc-smp | Nov 8, 2024 | Oct 13, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub