PT-2015-5275 · Linux+3 · Linux Kernel+3

Vasyl Kaigorodov

·

Published

2015-02-17

·

Updated

2016-12-28

·

CVE-2015-1420

CVSS v2.0

1.9

Low

VectorAV:L/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.19.2
Description A race condition issue exists in the handle to path function in fs/fhandle.c, allowing local users to bypass intended size restrictions. This is achieved by changing the handle bytes value of a file handle during the execution of the handle to path function, potentially triggering read operations on additional memory locations.
Recommendations For Linux kernel versions prior to 3.19.2, update to version 3.19.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the handle to path function in fs/fhandle.c to minimize the risk of exploitation.

Exploit

Fix

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2015-1186
ALT-PU-2015-1794
CVE-2015-1420
DSA-3170-1
OPENSUSE-SU-2015_1382-1
OPENSUSE-SU-2016_0301-1
SUSE-SU-2015:1224-1
SUSE-SU-2015:1478-1
SUSE-SU-2015:1592-1
SUSE-SU-2015:1611-1
SUSE-SU-2015:1678-1
SUSE-SU-2015:2167-1
USN-2660-1
USN-2661-1
USN-2662-1
USN-2663-1
USN-2664-1
USN-2665-1
USN-2666-1
USN-2667-1

Affected Products

Alt Linux
Linux Kernel
Suse
Ubuntu