--- title: "CVE-2014-5206\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2014-5206?format=md keywords: index, follow --- # CVE-2014-5206 Publication date 13 August 2014 Last updated 4 July 2026 --- Ubuntu priority **High** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description The do\_remount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain the MNT\_LOCK\_READONLY bit across a remount of a bind mount, which allows local users to bypass an intended read-only restriction and defeat certain sandbox protection mechanisms via a "mount -o remount" command within a user namespace. ### From the Ubuntu Security Team Kenton Varda discovered a flaw with read-only bind mounds when used with user namespaces. An unprivileged local user could exploit this flaw to gain full write privileges to a mount that should be read only. [Read the notes from the security team](https://ubuntu.com/security/CVE-2014-5206?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | linux-goldfish | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-grouper | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Ignored end of life | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-maguro | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-mako | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-manta | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-flo | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-lts-utopic | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-lts-vivid | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Fixed 3.13.0-34.60 | | 12.04 LTS precise | Not affected | | 10.04 LTS lucid | Not affected | | linux-armadaxp | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not affected | | 10.04 LTS lucid | Not in release | | linux-ec2 | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not affected | | linux-fsl-imx51 | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Ignored end of life | | linux-linaro-omap | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-linaro-shared | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-linaro-vexpress | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-lts-quantal | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not affected | | 10.04 LTS lucid | Not in release | | linux-lts-raring | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Ignored end of life, was needs-triage | | 10.04 LTS lucid | Not in release | | linux-lts-saucy | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Ignored end of life, was pending | | 10.04 LTS lucid | Not in release | | linux-lts-trusty | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Fixed 3.13.0-34.60~precise1 | | 10.04 LTS lucid | Not in release | | linux-mvl-dove | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Ignored end of life | | linux-qcm-msm | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Ignored end of life | | linux-raspi2 | 15.10 wily | Not affected | | 15.04 vivid | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-ti-omap4 | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not affected | | 10.04 LTS lucid | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) * [Patch details](https://ubuntu.com/security/CVE-2014-5206?format=md#patch-details) ## Notes --- ### [jdstrand](https://launchpad.net/~jdstrand) android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels --- ### [apw](https://launchpad.net/~apw) The existing break-fix appears to point to some self-tests break-fix: - db181ce011e3c033328608299cd6fac06ea50130 actual fix appears to be: a6138db815df5ee542d848318e5dae681590fccd --- ### [jdstrand](https://launchpad.net/~jdstrand) linux-lts-saucy no longer receives official support ### Patch details For informational purposes only. We recommend not to cherry-pick updates. [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) | Package | Patch details | | --- | --- | | linux | * Introduced by [0c55cfc](https://git.kernel.org/linus/0c55cfc4166d9a0f38de779bd4d75a90afbe7734), fixed by [a6138db](https://git.kernel.org/linus/a6138db815df5ee542d848318e5dae681590fccd) * Introduced by [0c55cfc](https://git.kernel.org/linus/0c55cfc4166d9a0f38de779bd4d75a90afbe7734), fixed by [07b6455](https://git.kernel.org/linus/07b645589dcda8b7a5249e096fece2a67556f0f4) | ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5206) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2014-5206) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2014-5206) * [Debian](https://security-tracker.debian.org/tracker/CVE-2014-5206) ### Related Ubuntu Security Notices (USN) + [USN-2318-1](https://usn.ubuntu.com/USN-2318-1) + Linux kernel vulnerabilities + 18 August 2014 + [USN-2317-1](https://usn.ubuntu.com/USN-2317-1) + Linux kernel (Trusty HWE) vulnerabilities + 18 August 2014 ### Other references * *