CVE-2013-1956 in Linux Kernel
Summary
The create_user_ns function in kernel/user_namespace.c in the Linux kernel before 3.8.6 does not check whether a chroot directory exists that differs from the namespace root directory, which allows local users to bypass intended filesystem restrictions via a crafted clone system call.
Reservation
02/19/2013
Disclosure
04/24/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 8481 | Linux Kernel Authentication namespace.c create_user_ns access control | 264 | Proof-of-Concept | Official fix | CVE-2013-1956 |