| Package | Affected versions | Patched versions |
|---|---|---|
| util-linux | = 2.10f= 2.10m= 2.10p= 2.11f= 2.11n= 2.11q= 2.11r= 2.11w= 2.11x= 2.11y= 2.11z= 2.12a= 2.12b= 2.12i= 2.12j= 2.12k= 2.12o= 2.12p= 2.12q= 2.13_pre1= 2.13_pre2= 2.8.1_alpha= 2.8_12= 2.9i= 2.9w |
umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free