CVE-2016-6213 in Linux Kernel

摘要 (英语)

fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to cause a denial of service (memory consumption and deadlock) via MS_BIND mount system calls, as demonstrated by a loop that triggers exponential growth in the number of mounts.

预定

2016-07-13

披露

2016-12-28

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
94692	Linux Kernel Mount namespace.c 拒绝服务	400	未定义	官方修复	CVE-2016-6213