VULNERABILITY INTELLIGENCE

CVE-2013-1957

CVSS score4.7 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2013-04-24
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:N/A:N

Description

The clone_mnt function in fs/namespace.c in the Linux kernel before 3.8.6 does not properly restrict changes to the MNT_READONLY flag, which allows local users to bypass an intended read-only property of a filesystem by leveraging a separate mount namespace.

Primary references