Skip to content
OpenAdvisories
Unscored USN-2318-1 2 CVEs

linux vulnerabilities

Published Aug 18, 2014 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Eric W. Biederman discovered a flaw with the mediation of mount flags in
the Linux kernel's user namespace subsystem. An unprivileged user could
exploit this flaw to by-pass mount restrictions, and potentially gain
administrative privileges. (CVE-2014-5207)

Kenton Varda discovered a flaw with read-only bind mounds when used with
user namespaces. An unprivileged local user could exploit this flaw to gain
full write privileges to a mount that should be read only. (CVE-2014-5206)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS linux 3.13.0-34.60

Vulnerabilities 2

  • Unscored —
    CVE-2014-5206

    The do_remount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain the MNT_LOCK_READONLY bi…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2014-5207 Public exploit

    fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NO…

    linux linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-5206
  • report
    https://ubuntu.com/security/CVE-2014-5207