[kernel-sec-discuss] r3743 - active

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-04-18 04:45:19 +0000 (Sat, 18 Apr 2015)
New Revision: 3743

Added:
   active/CVE-2014-9717
Log:
Add initial information for CVE-2014-9717, needs to be updated

Added: active/CVE-2014-9717
===================================================================
--- active/CVE-2014-9717	                        (rev 0)
+++ active/CVE-2014-9717	2015-04-18 04:45:19 UTC (rev 3743)
@@ -0,0 +1,13 @@
+Description: USERNS allows circumventing MNT_LOCKED
+References:
+ - http://marc.info/?l=linux-kernel&m=141271552117745&w=2
+Notes:
+Bugs:
+upstream:
+2.6.32-upstream-stable: N/A "user namespaces known broken before 3.5"
+sid:
+3.16-jessie-security:
+3.2-wheezy-security: N/A "user namespaces known broken before 3.5"
+2.6.32-squeeze-security: N/A "user namespaces known broken before 3.5"
+3.16-upstream-stable:
+3.2-upstream-stable: N/A "user namespaces known broken before 3.5"