Linux Kernel 'CLONE_NEWUSER|CLONE_FS' Local Privilege Escalation Vulnerability

Bugtraq ID:	58478
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Mar 13 2013 12:00AM
Updated:	Mar 13 2013 12:00AM
Credit:	Sebastian Krahmer
Vulnerable:	Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.3.2 Linux kernel 3.2.13 Linux kernel 3.2.9 Linux kernel 3.2.1 Linux kernel 3.1.8 Linux kernel 3.0.5 Linux kernel 3.0.4 Linux kernel 3.0.2 Linux kernel 3.0.1 Linux kernel 3.2.2 Linux kernel 3.0.18 Linux kernel 3.0-rc4-git1 Linux kernel 3.0-rc1 Linux kernel 3.0
Not Vulnerable:

Linux Kernel 'CLONE_NEWUSER|CLONE_FS' Local Privilege Escalation Vulnerability

Linux kernel is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to gain kernel privileges, which will aid in further attacks.

Linux Kernel 'CLONE_NEWUSER|CLONE_FS' Local Privilege Escalation Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/58478.c

Linux Kernel 'CLONE_NEWUSER|CLONE_FS' Local Privilege Escalation Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Linux Kernel 'CLONE_NEWUSER|CLONE_FS' Local Privilege Escalation Vulnerability

References:

• Linux kernel Homepage (kernel.org)