https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 16:52:55 +0000 https://cve.radiocsirt.org/vuln/cve-2014-5207 <p>fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service (excessive filesystem updating) on systems that had atime disabled via a &#34;mount -o remount&#34; command within a user namespace.</p> <p>fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service (excessive filesystem updating) on systems that had atime disabled via a &#34;mount -o remount&#34; command within a user namespace.</p> https://cve.radiocsirt.org/vuln/cve-2014-5207 https://cve.radiocsirt.org/vuln/usn-2318-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Eric W. Biederman discovered a flaw with the mediation of mount flags in the Linux kernel&#39;s user namespace subsystem. An unprivileged user could exploit this flaw to by-pass mount restrictions, and potentially gain administrative privileges. (CVE-2014-5207)</p> <p>Kenton Varda discovered a flaw with read-only bind mounds when used with user namespaces. An unprivileged local user could exploit this flaw to gain full write privileges to a mount that should be read only. (CVE-2014-5206)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Eric W. Biederman discovered a flaw with the mediation of mount flags in the Linux kernel&#39;s user namespace subsystem. An unprivileged user could exploit this flaw to by-pass mount restrictions, and potentially gain administrative privileges. (CVE-2014-5207)</p> <p>Kenton Varda discovered a flaw with read-only bind mounds when used with user namespaces. An unprivileged local user could exploit this flaw to gain full write privileges to a mount that should be read only. (CVE-2014-5206)</p> https://cve.radiocsirt.org/vuln/usn-2318-1