The clone_mnt function in fs/namespace.c in the Linux kernel before 3.8.6 does not properly restrict changes to the MNT_READONLY flag, which allows local users to bypass an intended read-only property of a filesystem by leveraging a separate mount namespace.
CPE | Name | Operator | Version |
---|---|---|---|
linux_kernel | eq | 3.8.2 | |
linux_kernel | eq | 3.8.0 | |
linux_kernel | le | 3.8.5 | |
linux_kernel | eq | 3.8.1 | |
linux_kernel | eq | 3.8.3 | |
linux_kernel | eq | 3.8.4 |