CVE-2014-7975

Description

The do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAP_SYS_ADMIN capability for do_remount_sb calls that change the root filesystem to read-only, which allows local users to cause a denial of service (loss of writability) by making certain unshare system calls, clearing the / MNT_LOCKED flag, and making an MNT_FORCE umount system call.

5.5

CVSS

Severity: Medium

CVSS 3.1 •

CVSS 2.0 •

EPSS 0.04%

Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory kernel.org

Affected: n/a n/a

References

Link	Tags
http://www.ubuntu.com/usn/USN-2418-1	third party advisory vendor advisory
http://secunia.com/advisories/61145	third party advisory broken link
https://exchange.xforce.ibmcloud.com/vulnerabilities/96994	vdb entry third party advisory
http://www.ubuntu.com/usn/USN-2416-1	third party advisory vendor advisory
http://www.ubuntu.com/usn/USN-2417-1	third party advisory vendor advisory
http://www.ubuntu.com/usn/USN-2415-1	third party advisory vendor advisory
http://www.ubuntu.com/usn/USN-2419-1	third party advisory vendor advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0ef3a56b1c466629cd0bf482b09c7b0e5a085bb5	mailing list patch vendor advisory
http://www.securitytracker.com/id/1031180	vdb entry third party advisory
http://secunia.com/advisories/60174	third party advisory broken link
http://www.ubuntu.com/usn/USN-2421-1	third party advisory vendor advisory
http://www.ubuntu.com/usn/USN-2420-1	third party advisory vendor advisory
https://access.redhat.com/errata/RHSA-2017:2077	third party advisory vendor advisory
https://access.redhat.com/errata/RHSA-2017:1842	third party advisory vendor advisory
http://secunia.com/advisories/62633	third party advisory broken link
http://www.openwall.com/lists/oss-security/2014/10/08/22	third party advisory mailing list
http://secunia.com/advisories/62634	third party advisory broken link
http://thread.gmane.org/gmane.linux.kernel.stable/109312	mailing list broken link
http://www.securityfocus.com/bid/70314	vdb entry third party advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1151108	issue tracking third party advisory patch

Frequently Asked Questions

What is the severity of CVE-2014-7975?: CVE-2014-7975 has been scored as a medium severity vulnerability.
How to fix CVE-2014-7975?: To fix CVE-2014-7975, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2014-7975 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2014-7975 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.