fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service (excessive filesystem updating) on systems that had atime disabled via a "mount -o remount" command within a user namespace.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 18, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-devel | Jun 17, 2020 | Aug 18, 2014 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-devel | Dec 18, 2019 | Aug 18, 2014 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Aug 18, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-34-powerpc-e500mcUpgrade linux-image-3.13.0-34-lowlatencyUpgrade linux-image-3.13.0-34-powerpc-e500Upgrade linux-image-3.13.0-34-powerpc64-smpUpgrade linux-image-3.13.0-34-powerpc64-embUpgrade linux-image-3.13.0-34-powerpc-smpUpgrade linux-image-3.13.0-34-genericUpgrade linux-image-3.13.0-34-generic-lpae | Nov 8, 2024 | Aug 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub