CVE-2008-2931

Published: Jul 9, 2008Modified: Apr 23, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.

Affected (11)

Products: Linux: Linux Kernel · Debian: Debian Linux · Novell: Suse Linux Enterprise Desktop, Suse Linux Enterprise Server · +2 more

Show all products

Linux: Linux Kernel · Debian: Debian Linux · Novell: Suse Linux Enterprise Desktop, Suse Linux Enterprise Server · Opensuse: Opensuse · Canonical: Ubuntu Linux

1 product

1 product

2 products

Suse Linux Enterprise Desktop

Suse Linux Enterprise Server

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.22

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Desktop	Version 10.0 sp1
Novell Suse Linux Enterprise Desktop	Version 10.0 sp2
Novell Suse Linux Enterprise Server	Version 10.0 sp1
Novell Suse Linux Enterprise Server	Version 10.0 sp2
Opensuse Opensuse	From 10.3 to 11.0

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 7.04
Canonical Ubuntu Linux	Version 7.10
Canonical Ubuntu Linux	Version 8.04

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (40)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=ee6f958291e2a768fd727e7a67badfff0b67711a

Source: secalert@redhat.com

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22

Source: secalert@redhat.com

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/30982

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/31551

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/31614

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/32023

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/32759

Source: secalert@redhat.com

Broken Link

http://www.debian.org/security/2008/dsa-1630

Source: secalert@redhat.com

PatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2008/07/08/3

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2008/07/08/4

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0885.html

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/bid/30126

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=454388

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/43696

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10437

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/637-1/

Source: secalert@redhat.com

Third Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=ee6f958291e2a768fd727e7a67badfff0b67711a