5.5

CVE-2025-38499

clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns

In the Linux kernel, the following vulnerability has been resolved:

clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns

What we want is to verify there is that clone won't expose something
hidden by a mount we wouldn't be able to undo.  "Wouldn't be able to undo"
may be a result of MNT_LOCKED on a child, but it may also come from
lacking admin rights in the userns of the namespace mount belongs to.

clone_private_mnt() checks the former, but not the latter.

There's a number of rather confusing CAP_SYS_ADMIN checks in various
userns during the mount, especially with the new mount API; they serve
different purposes and in case of clone_private_mnt() they usually,
but not always end up covering the missing check mentioned above.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.4.281 < 4.5
Linux ≫ Linux Kernel Version >= 4.9.280 < 4.10
Linux ≫ Linux Kernel Version >= 4.14.244 < 4.15
Linux ≫ Linux Kernel Version >= 4.19.204 < 4.20
Linux ≫ Linux Kernel Version >= 5.4.141 < 5.5
Linux ≫ Linux Kernel Version >= 5.10.59 < 5.11
Linux ≫ Linux Kernel Version >= 5.13.11 < 5.14
Linux ≫ Linux Kernel Version >= 5.14.1 < 5.15.190
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.147
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.100
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.40
Linux ≫ Linux Kernel Version >= 6.13 < 6.15.3
Linux ≫ Linux Kernel Version 5.14 Update -
Linux ≫ Linux Kernel Version 5.14 Update rc6
Linux ≫ Linux Kernel Version 5.14 Update rc7
Debian ≫ Debian Linux Version 11.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.051
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/38628ae06e2a37770cd794802a3f1310cf9846e3
Patch
https://git.kernel.org/stable/c/c28f922c9dcee0e4876a2c095939d77fe7e15116
Patch
https://git.kernel.org/stable/c/d717325b5ecf2a40daca85c61923e17f32306179
Patch
https://git.kernel.org/stable/c/dc6a664089f10eab0fb36b6e4f705022210191d2
Patch
https://git.kernel.org/stable/c/e77078e52fbf018ab986efb3c79065ab35025607
Patch
https://git.kernel.org/stable/c/36fecd740de2d542d2091d65d36554ee2bcf9c65
Patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-082556.html