CVE-2014-5206

2014-08-1300:00:00

ubuntu.com

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

The do_remount function in fs/namespace.c in the Linux kernel through
3.16.1 does not maintain the MNT_LOCK_READONLY bit across a remount of a
bind mount, which allows local users to bypass an intended read-only
restriction and defeat certain sandbox protection mechanisms via a “mount
-o remount” command within a user namespace.

Bugs

<https://launchpad.net/bugs/1356318>

Notes

Author	Note
jdstrand	android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels
apw	The existing break-fix appears to point to some self-tests break-fix: - db181ce011e3c033328608299cd6fac06ea50130 actual fix appears to be: a6138db815df5ee542d848318e5dae681590fccd
jdstrand	linux-lts-saucy no longer receives official support

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlinux< 3.13.0-34.60UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-34.60~precise1UNKNOWN