Wind River Support Network


SCP6-726 : Security Advisory - linux - CVE-2015-4177

Created: May 17, 2016    Updated: Dec 3, 2018
Resolved Date: Sep 25, 2017
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Kernel


The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_DETACH umount2 system call.<a href=>CWE-476: NULL Pointer Dereference</a>

Other Downloads

Live chat