CVE-2013-1858

CVE-2013-1858

The clone system-call implementation in the Linux kernel before 3.8.3 does not properly handle a combination of the CLONE_NEWUSER and CLONE_FS flags,
which allows local users to gain privileges by calling chroot and leveraging the sharing of the 
/ directory between a parent process and a child process.

Vulnerability reference:

• CVE-2013-1858
• exp-db

Kernels

before 3.8.3

Usage

$ cc -Wall clown-newuser.c -static

$ ./a.out

References

• CVE Reference: CVE-2013-1858