CVE-2013-1956

The create_user_ns function in kernel/user_namespace.c in the Linux kernel before 3.8.6 does not check whether a chroot directory exists that differs from the…

published April 24, 2013

CVSS
—
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

The create_user_ns function in kernel/user_namespace.c in the Linux kernel before 3.8.6 does not check whether a chroot directory exists that differs from the namespace root directory, which allows local users to bypass intended filesystem restrictions via a crafted clone system call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00383 · 31.2th percentile
Published
2013-04-24T19:00Z
EPSS history
Timeline
  • 24 APR 19:00Z
    The create_user_ns function in kernel/user_namespace.c in the Linux kernel before 3.8.6 does not check whether a chroot directory exists that differs from the…
    cvelistv5