PT-2016-3602 · Linux+1 · Linux Kernel+1

Vasyl Kaigorodov · Published 2015-03-27 · Updated 2016-06-27 · CVE-2015-2686

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.19 through 3.19.2

Description The issue concerns the Linux kernel, where the net/socket.c file does not properly validate certain range data for the sendto and recvfrom system calls. This can be exploited by local users to gain privileges, particularly in subsystems that utilize the copy from iter function within the iov iter interface, such as the Bluetooth subsystem.

Recommendations For Linux kernel versions 3.19 through 3.19.2, update to version 3.19.3 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2015-1326

CVE-2015-2686

Affected Products

Alt Linux

Linux Kernel

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2015-2686 · Security Note
• https://cve.org/CVERecord?id=CVE-2015-2686 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-2686 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-3597.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-2686 · Vendor Advisory
• https://github.com/torvalds/linux/commit/4de930efc23b92ddf88ce91c405ee645fe6e27ea · Note
• http://twitter.com/grsecurity/statuses/579050211605102592 · Note
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3 · Note
• http://grsecurity.net/~spender/viro.txt · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1205242 · Note
• http://twitter.com/grsecurity/statuses/579075689439059968 · Note
• http://securityfocus.com/bid/73286 · Note
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4de930efc23b92ddf88ce91c405ee645fe6e27ea · Note
• http://twitter.com/grsecurity/statuses/579060953477701632 · Note
• http://openwall.com/lists/oss-security/2015/03/23/14 · Note