fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service (excessive filesystem updating) on systems that had atime disabled via a "mount -o remount" command within a user namespace.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 18, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Jun 17, 2020 | Aug 18, 2014 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade perf | Dec 18, 2019 | Aug 18, 2014 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Dec 18, 2015 | Aug 18, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-34-powerpc64-embUpgrade linux-image-3.13.0-34-generic-lpaeUpgrade linux-image-3.13.0-34-genericUpgrade linux-image-3.13.0-34-powerpc-smpUpgrade linux-image-3.13.0-34-powerpc64-smpUpgrade linux-image-3.13.0-34-lowlatencyUpgrade linux-image-3.13.0-34-powerpc-e500mcUpgrade linux-image-3.13.0-34-powerpc-e500 | Nov 8, 2024 | Aug 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub