The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack."
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Sep 19, 2018 | Nov 16, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 16, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 13, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libs | Nov 30, 2017 | Nov 16, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Nov 16, 2015 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-ec2 | Dec 18, 2015 | Nov 16, 2015 |
| Ubuntu | — | Upgrade linux-image-3.2.0-93-generic-paeUpgrade linux-image-3.2.0-93-powerpc64-smpUpgrade linux-image-3.16.0-52-genericUpgrade linux-image-3.19.0-32-powerpc64-embUpgrade linux-image-3.16.0-52-powerpc-smpUpgrade linux-image-3.13.0-67-powerpc64-smpUpgrade linux-image-3.13.0-67-generic-lpaeUpgrade linux-image-3.2.0-93-genericUpgrade linux-image-3.13.0-67-lowlatencyUpgrade linux-image-3.16.0-52-generic-lpaeUpgrade linux-image-3.13.0-67-powerpc-e500mcUpgrade linux-image-3.2.0-1473-omap4Upgrade linux-image-3.13.0-67-powerpc64-embUpgrade linux-image-3.2.0-93-omapUpgrade linux-image-3.16.0-52-powerpc-e500mcUpgrade linux-image-3.19.0-32-lowlatencyUpgrade linux-image-3.19.0-32-powerpc-smpUpgrade linux-image-3.16.0-52-powerpc64-smpUpgrade linux-image-3.19.0-32-generic-lpaeUpgrade linux-image-3.16.0-52-powerpc64-embUpgrade linux-image-3.19.0-32-powerpc64-smpUpgrade linux-image-3.19.0-32-powerpc-e500mcUpgrade linux-image-3.19.0-32-genericUpgrade linux-image-3.13.0-67-powerpc-smpUpgrade linux-image-3.2.0-93-powerpc-smpUpgrade linux-image-3.2.0-93-highbankUpgrade linux-image-3.13.0-67-powerpc-e500Upgrade linux-image-3.13.0-67-genericUpgrade linux-image-3.2.0-93-virtualUpgrade linux-image-3.16.0-52-lowlatency | Nov 9, 2015 | Nov 5, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub