Все бюллетени/sisyphus/ALT-PU-2014-2023-1
ALT-PU-2014-2023-1

Обновление пакета kernel-image-led-ws в ветке sisyphus

Версия3.15.10-alt4
Задание#127533
Опубликовано2014-08-21
Макс. серьёзностьHIGH
Серьёзность:

Закрытые проблемы (2)

CVE-2014-5206
HIGH7.2

The do_remount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain the MNT_LOCK_READONLY bit across a remount of a bind mount, which allows local users to bypass an intended read-only restriction and defeat certain sandbox protection mechanisms via a "mount -o remount" command within a user namespace.

Опубликовано: 2014-08-18Изменено: 2025-04-12
CVSS 2.0ВЫСОКАЯ 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C
Ссылки
CVE-2014-5207
MEDIUM6.2

fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service (excessive filesystem updating) on systems that had atime disabled via a "mount -o remount" command within a user namespace.

Опубликовано: 2014-08-18Изменено: 2025-04-12
CVSS 2.0СРЕДНЯЯ 6.2
CVSS:2.0/AV:L/AC:H/Au:N/C:C/I:C/A:C
Ссылки