CVE-2013-1957

Published: Apr 24, 2013Modified: Apr 29, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:C/I:N/A:N

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

The clone_mnt function in fs/namespace.c in the Linux kernel before 3.8.6 does not properly restrict changes to the MNT_READONLY flag, which allows local users to bypass an intended read-only property of a filesystem by leveraging a separate mount namespace.

Affected (6)

Products: Linux: Linux Kernel

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.8.5
Linux Linux Kernel	Version 3.8.0
Linux Linux Kernel	Version 3.8.1
Linux Linux Kernel	Version 3.8.2
Linux Linux Kernel	Version 3.8.3
Linux Linux Kernel	Version 3.8.4

Related CWEs

References (8)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=132c94e31b8bca8ea921f9f96a57d684fa4ae0a9

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/04/16/11

Source: secalert@redhat.com

https://github.com/torvalds/linux/commit/132c94e31b8bca8ea921f9f96a57d684fa4ae0a9

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=132c94e31b8bca8ea921f9f96a57d684fa4ae0a9

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/04/16/11

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/132c94e31b8bca8ea921f9f96a57d684fa4ae0a9

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.