Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2015-4176: Linux kernel before 4.0.2 lets local users read any file
CVE-2015-4176 · published 10 years ago
Summary
The Linux kernel versions older than 4.0.2 have a mistake in how they handle mounted filesystems. This can let someone with local access use special privileges to view or delete files they shouldn't be able to. Upgrade the kernel to version 4.0.2 or later, or apply any provided patches, to close the gap.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| linux | linux_kernel |
<= 4.0.1 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
Original advisory text
fs/namespace.c in the Linux kernel before 4.0.2 does not properly support mount connectivity, which allows local users to read arbitrary files by leveraging user-namespace root access for deletion ...
fs/namespace.c in the Linux kernel before 4.0.2 does not properly support mount connectivity, which allows local users to read arbitrary files by leveraging user-namespace root access for deletion of a file or directory.
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e0c9c0... Vendor Advisory
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.2
- http://www.openwall.com/lists/oss-security/2015/06/04/5
- https://bugzilla.redhat.com/show_bug.cgi?id=1249442
- https://github.com/torvalds/linux/commit/e0c9c0afd2fc958ffa34b697972721d81df8a56... Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-200Information Exposure
Timeline
Published2 May 2016
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2015-4176 · NVD
Track software like this
Free during beta