PT-2015-5275 · Linux+3 · Linux Kernel+3

Vasyl Kaigorodov

·

Publicado

2015-02-17

·

Atualizado

2016-12-28

·

CVE-2015-1420

CVSS v2.0

1.9

Baixa

VetorAV:L/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.19.2
Description A race condition issue exists in the handle to path function in fs/fhandle.c, allowing local users to bypass intended size restrictions. This is achieved by changing the handle bytes value of a file handle during the execution of the handle to path function, potentially triggering read operations on additional memory locations.
Recommendations For Linux kernel versions prior to 3.19.2, update to version 3.19.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the handle to path function in fs/fhandle.c to minimize the risk of exploitation.

Exploit

Correção

Race Condition

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

ALT-PU-2015-1186
ALT-PU-2015-1794
CVE-2015-1420
DSA-3170-1
OPENSUSE-SU-2015_1382-1
OPENSUSE-SU-2016_0301-1
SUSE-SU-2015:1224-1
SUSE-SU-2015:1478-1
SUSE-SU-2015:1592-1
SUSE-SU-2015:1611-1
SUSE-SU-2015:1678-1
SUSE-SU-2015:2167-1
USN-2660-1
USN-2661-1
USN-2662-1
USN-2663-1
USN-2664-1
USN-2665-1
USN-2666-1
USN-2667-1

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu