mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-23 19:04:02 +02:00
19 lines
850 B
Markdown
19 lines
850 B
Markdown
### [CVE-2015-4177](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4177)
|
|

|
|

|
|

|
|
|
|
### Description
|
|
|
|
The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_DETACH umount2 system call.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
No PoCs from references.
|
|
|
|
#### Github
|
|
- https://github.com/thdusdl1219/CVE-Study
|
|
- https://github.com/vincent-deng/veracode-container-security-finding-parser
|
|
|