VulnerabilityModified
CVE-2015-7613
Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c.
MEDIUM 6.9EPSS 0.41%
Does this matter?
Lower severity and a low EPSS score (0.41%). Track it; it rarely justifies an emergency change on its own.
Description
Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c.
- CVSS 2.0
- 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 0.41% probability · 35th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362
- Affected
- linux/linux kernel
- Source
- cve@mitre.org
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a532277938798b53178d5a66af6e2915cb27cfThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2636.htmlThird Party Advisory
- http://www.debian.org/security/2015/dsa-3372Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/10/01/8Exploit, Mailing List, Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlThird Party Advisory
- http://www.securityfocus.com/bid/76977Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034094Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034592Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2761-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2762-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2763-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2764-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2765-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2792-1Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1268270Issue Tracking, Third Party Advisory
- https://github.com/torvalds/linux/commit/b9a532277938798b53178d5a66af6e2915cb27cfThird Party Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10146Third Party Advisory
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a532277938798b53178d5a66af6e2915cb27cfThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.htmlMailing List, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.