Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux umount命令权限提升漏洞
Vulnerability Description
util-linux包包含各种底层系统工具，用于实现Linux的基本功能。 umount在处理文件卸载时存在漏洞，本地攻击者可能利用此漏洞获取root用户权限。在加载系统文件时，util-linux包中的mount命令默认下总是设置了nosuid和nodev标记，仅有超级用户或fstab项中的明确设置才能覆盖这个标签。但是，umount命令允许用户使用-r选项删除这些标签。在系统繁忙无法完全卸载文件系统时(如进程的当前目录)，-r选项会要求umount只读重新加载文件系统，但仅以MS_RDONLY ("r
CVSS Information
N/A
Vulnerability Type
N/A