Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel has been addressed, involving a leak of user namespace and potentially mount ID map information in the open_tree_attr system call. This issue arises because, after the want_mount_setattr function indicates a positive response, the finish_mount_kattr function is required to release the mount user namespace. However, failing to execute do_mount_setattr does not alter this requirement, leading to an unintentional leak of user namespace and possibly mount ID map data.
The vulnerability could result in the unintended exposure of user namespace and mount ID map information, which may have implications for namespace isolation and resource management.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.