Christian Brauner, project leader of LXC and Incus, a maintainer of glibc and participant in the development of systemd, discovered issues in the code of the Linux VFS (Virtual File System) subsystem that could lead to crashes, data corruption, or security issues. After uncovering a problem that had gone unnoticed for 5 years, developer Seth Forshee from Digital Ocean fixed a bug that allowed exceeding the original namespace in which the mounting occurred, potentially leading to security issues. Fortunately, to exploit this class of vulnerabilities, the user must have elevated privileges, which significantly reduces the practical utility of this bug for attackers.
Bron: opennet.ru
