PT-2016-3620 · Linux+1 · Linux Kernel+1

Wade Mealing

·

Publicado

2015-06-09

·

Atualizado

2016-05-06

·

CVE-2015-4177

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.0.5
Description The issue is related to the collect mounts function in fs/namespace.c, which does not properly handle the case when it executes after a path has been unmounted. This allows local users with user-namespace root access to cause a denial of service, resulting in a system crash, by making an MNT DETACH umount2 system call.
Recommendations For Linux kernel versions prior to 4.0.5, update to version 4.0.5 or later to resolve the issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

ALT-PU-2015-1505
ALT-PU-2015-1849
CVE-2015-4177
MGASA-2015-0386
MGASA-2015-0390
MGASA-2016-0015

Produtos afetados

Alt Linux
Linux Kernel