CVE-2013-1858

The clone system-call implementation in the Linux kernel before 3.8.3 does not properly handle a combination of the CLONE_NEWUSER and CLONE_FS flags, which…

published April 5, 2013

CVSS
—
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

The clone system-call implementation in the Linux kernel before 3.8.3 does not properly handle a combination of the CLONE_NEWUSER and CLONE_FS flags, which allows local users to gain privileges by calling chroot and leveraging the sharing of the / directory between a parent process and a child process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01685 · 76.8th percentile
Published
2013-04-05T21:00Z
EPSS history
Timeline
  • 05 APR 21:00Z
    The clone system-call implementation in the Linux kernel before 3.8.3 does not properly handle a combination of the CLONE_NEWUSER and CLONE_FS flags, which…
    cvelistv5