PT-2015-7572 · Linux+5 · Linux Kernel+5

Dmitry Vyukov · Published 2015-10-02 · Updated 2024-07-17 · CVE-2015-7613

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.2.3

Description A race condition exists in the IPC object implementation, allowing local users to gain privileges. This occurs when an ipc addid call is triggered, leading to comparisons of uid and gid against uninitialized data. The issue is related to the msg.c, shm.c, and util.c files.

Recommendations For Linux kernel versions through 4.2.3, update to a version later than 4.2.3 to resolve the issue. As a temporary workaround, consider restricting access to the IPC object implementation to minimize the risk of exploitation.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2015-1924

ALT-PU-2016-1485

CESA-2015_2152

CESA-2015_2636

CVE-2015-7613

DLA-325-1

DSA-3372-1

RHSA-2015:2152

RHSA-2015:2411

RHSA-2015:2587

RHSA-2015:2636

RHSA-2015_2152

RHSA-2015_2411

RHSA-2015_2636

SUSE-SU-2015:1727-1

SUSE-SU-2015:2084-1

SUSE-SU-2015:2085-1

SUSE-SU-2015:2086-1

SUSE-SU-2015:2087-1

SUSE-SU-2015:2089-1

SUSE-SU-2015:2090-1

SUSE-SU-2015:2091-1

USN-2761-1

USN-2762-1

USN-2763-1

USN-2764-1

USN-2765-1

USN-2792-1

USN-2796-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 133

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384 · Exploit
• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• 🔥 https://github.com/whu-enjoy/CVE-2015-8660 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2015/10/01/8 · Exploit
• http://ubuntu.com/usn/USN-2792-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2764-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2765-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2763-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-3502.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-2636.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-7613 · Vendor Advisory
• http://debian.org/security/2015/dsa-3372 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-7613 · Vendor Advisory