peter bassill · operator
$ cve CVE-2014-5207 JSON

CVE-2014-5207 EXPLOIT

6.2
MEDIUM · CVSS 2.0 · EPSS 0.9% (pctl 58)

Patch early

A public exploit exists.

Description

fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service (excessive filesystem updating) on systems that had atime disabled via a "mount -o remount" command within a user namespace.

Scoring

CVSS6.2 (MEDIUM, v2.0)
VectorAV:L/AC:H/Au:N/C:C/I:C/A:C
EPSS0.88% — more likely to be exploited than 58% of all CVEs
WeaknessCWE-269
On CISA KEVno
Public exploityes
Published2014-08-18
Last modified2026-06-17

Affected (2)

VendorProduct
canonicalubuntu linux
linuxlinux kernel

Public exploits

SourceTitleDate
exploit-dbLinux Kernel < 3.16.1 - 'Remount FUSE' Local Privilege Escalation2014-10-09

References

→ the Explorer  ·  watch your stack  ·  NVD