NetSight
IP …
medium6.9

CVE-2015-2925

The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users…

Impact

The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack."

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.72
from 3.3 before 3.4.110
from 3.5 before 3.10.91
from 3.11 before 3.12.49
from 3.13 before 3.14.55
from 3.15 before 3.16.35
DebianDebian Linux
Versions 7.0, 8.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04

References