Groups > linux.debian.bugs.dist > #1112458

Bug#1012547: linux: disable user namespaces per default

From	Philippe Cerfon <philcerf@gmail.com>
Newsgroups	linux.debian.bugs.dist, linux.debian.kernel
Subject	Bug#1012547: linux: disable user namespaces per default
Date	2022-08-08 16:00 +0200
Message-ID	<ESbst-gOiA-3@gated-at.bofh.it> (permalink)
References	(1 earlier) <ExTRv-4yJz-5@gated-at.bofh.it> <Ez0xz-5dYy-1@gated-at.bofh.it> <EFQMN-9izL-5@gated-at.bofh.it> <EwdUm-3xRS-7@gated-at.bofh.it> <EFQMN-9izL-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

Apparently it's already Christmas:

The next two holes that likely allow privilege escalation and that
would have been mitigated by unprivileged user namespaces being
disabled:
 CVE-2022-1015, CVE-2022-1016

Cheers,
Phiippe

Back to linux.debian.bugs.dist | Previous | Next | Find similar | Unroll thread

Thread

Bug#1012547: linux: disable user namespaces per default Philippe Cerfon <philcerf@gmail.com> - 2022-08-08 16:00 +0200

csiph-web