CVE-2008-2931 — Improper Privilege Management in Kernel

CWE-269 — Improper Privilege Management6 documents6 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 92.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Linux KernelOpensuseCanonical Ubuntu Linux+3 more
Timeline
PublishedJul 9
Latest updateMay 1

Description

The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶NVDlinux/linux_kernel< 2.6.22
▶NVDopensuse/opensuse10.3 — 11.0

Also affects: Debian Linux 4.0, Ubuntu Linux 6.06, 7.04, 7.10, 8.04

Patches

Patch: www.debian.org ↗Patch: bugzilla.redhat.com ↗Patch: www.debian.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-qrf3-cqg5-vv53: The do_change_type function in fs/namespace↗2022-05-01
▶
CVEList
CVE-2008-2931: The do_change_type function in fs/namespace↗2008-07-09
▶

📋Vendor Advisories

2
Ubuntu
Linux kernel vulnerabilities↗2008-08-25
▶
Red Hat
kernel: missing check before setting mount propagation↗2007-05-08
▶

💬Community

1
Bugzilla
CVE-2008-2931 kernel: missing check before setting mount propagation↗2008-07-08
▶
CVE-2008-2931 — Improper Privilege Management in Kernel | cvebase