CVE-2014-5207: Canonical Ubuntu Linux

Medium severity, CVSS 6.2. EPSS: 0.9% chance of exploitation in the next 30 days.

fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service (excessive filesystem updating) on systems that had atime disabled via a "mount -o remount" command within a user namespace.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only
• Linux Linux Kernel: up to and including 3.16.1

Published 2014-08-18. Last modified 2026-06-17.