CVE-2015-2925

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.2.4

Description The issue allows local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack." This occurs because the prepend path function in fs/dcache.c does not properly handle rename actions inside a bind mount.

Recommendations For Linux kernel versions prior to 4.2.4, update to version 4.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the rename functionality inside bind mounts to minimize the risk of exploitation.