CVE-2014-9717

fs/namespace.c in the Linux kernel before 4.0.2 processes MNT_DETACH umount2 system calls without verifying that the MNT_LOCKED flag is unset, which allows…

published May 2, 2016

CVSS
—
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

fs/namespace.c in the Linux kernel before 4.0.2 processes MNT_DETACH umount2 system calls without verifying that the MNT_LOCKED flag is unset, which allows local users to bypass intended access restrictions and navigate to filesystem locations beneath a mount by calling umount2 within a user namespace.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00331 · 24.9th percentile
Published
2016-05-02T10:00Z
EPSS history
Timeline
  • 02 MAY 10:00Z
    fs/namespace.c in the Linux kernel before 4.0.2 processes MNT_DETACH umount2 system calls without verifying that the MNT_LOCKED flag is unset, which allows…
    cvelistv5