PT-2016-3561 · Linux+1 · Linux Kernel+1

Published 2015-06-03 · Updated 2020-08-04 · CVE-2015-0572

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x

Description The issue is related to multiple race conditions in the ADSPRPC driver, specifically in the drivers/char/adsprpc.c and drivers/char/adsprpc compat.c files. This can be exploited by attackers to cause a denial of service, resulting in a zero-value write, or possibly have other unspecified impacts. The exploitation is possible via a COMPAT FASTRPC IOCTL INVOKE FD ioctl call.

Recommendations For Linux kernel version 3.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2015-1485

ALT-PU-2015-1849

CVE-2015-0572

Affected Products

Alt Linux

Linux Kernel

References · 101

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/fi01/CVE-2015-3636 · Exploit
• 🔥 https://github.com/android-rooting-tools/libpingpong_exploit · Exploit
• 🔥 https://github.com/a7vinx/CVE-2015-3636 · Exploit
• 🔥 https://github.com/askk/libping_unhash_exploit_POC · Exploit
• 🔥 https://github.com/hhj4ck/CVE-2016-2067 · Exploit
• 🔥 https://github.com/elit3pwner/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://github.com/x1ns4n3/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://github.com/0x1ns4n3/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://github.com/betalphafai/CVE-2015-0568 · Exploit
• 🔥 https://github.com/betalphafai/cve-2015-3636_crash · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6787 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8019 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3291 · Security Note
• https://bdu.fstec.ru/vul/2016-02099 · Security Note