PT-2016-3618 · Linux+3 · Linux Kernel+3

Sami Farin · Published 2014-02-21 · Updated 2017-11-12 · CVE-2015-4170

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13-rc4-next-20131218

Description A race condition exists in the ldsem cmpxchg function, allowing local users to cause a denial of service. This can lead to a deadlock between ldsem down read and ldsem down write by establishing a new tty thread during the shutdown of a previous tty thread.

Recommendations For Linux kernel versions prior to 3.13-rc4-next-20131218, update to version 3.13-rc4-next-20131218 or later to resolve the issue.

Exploit

Fix

DoS

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2014-1232

ALT-PU-2014-2064

CESA-2015_2152

CVE-2015-4170

RHSA-2015:2152

RHSA-2015:2411

RHSA-2015_2152

RHSA-2015_2411

RHSA-2016:1395

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

References · 28

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-4170 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2016:1395 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xz · Patch
• https://ubuntu.com/security/CVE-2015-4170 · Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203ae · Vendor Advisory