CVE-2008-2931: High severity linux kernel vulnerability
The dochangetype function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAPSYSADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.
Other sources
The dochangetype routine has a missing check for capable(CAPSYSADMIN). Even though the mount command restricts the changing of mountpoint type to only root users, it is possible for local unprivileged users to bypass and abuse this.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2931?
CVE-2008-2931 is considered a medium severity vulnerability due to its potential to allow privilege escalation.
How do I fix CVE-2008-2931?
To mitigate CVE-2008-2931, upgrade to a version of the Linux kernel that is 2.6.22 or later.
Who is affected by CVE-2008-2931?
Users running Linux kernel versions prior to 2.6.22, including certain distributions like Debian 4.0 and SUSE Linux Enterprise, are affected by CVE-2008-2931.
What type of attack does CVE-2008-2931 facilitate?
CVE-2008-2931 can facilitate local privilege escalation attacks, allowing unprivileged users to gain elevated privileges.
What component is vulnerable in CVE-2008-2931?
The vulnerability in CVE-2008-2931 is due to the do_change_type function in the fs/namespace.c file of the Linux kernel.