Privilege escalation in Linux Kernel

CVE-2014-5207

fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service (excessive filesystem updating) on systems that had atime disabled via a "mount -o remount" command within a user namespace.

Vulnerability class: Privilege Escalation

EPSS: 0.009 (55.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Third Party Advisory)
  • cve@mitre.org (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)
  • cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
  • cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)
  • cve@mitre.org (x_refsource_CONFIRM)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Third Party Advisory, Issue Tracking)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
  • cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)