CVE-2008-2931

The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows…

published July 9, 2008

CVSS
—
EPSS
0%
Percentile
30.3
In the wild
Unconfirmed
What it is

The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00375 · 30.3th percentile
Published
2008-07-09T18:00Z
EPSS history
Timeline
  • 09 JUL 18:00Z
    The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows…
    cvelistv5