Vulnerability in Linux Kernel

CVE-2013-1957

The clone_mnt function in fs/namespace.c in the Linux kernel before 3.8.6 does not properly restrict changes to the MNT_READONLY flag, which allows local users to bypass an intended read-only property of a filesystem by leveraging a separate mount namespace.

EPSS: 0.003 (26.3th percentile) — read the EPSS interpretation.