PT-2016-4038 · Linux+4 · Linux Kernel+4

Ben Hawkes · Published 2016-03-03 · Updated 2018-11-15 · CVE-2015-8830

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel version 4.0

Description The issue is related to an integer overflow in the aio setup single vector function in fs/aio.c, which allows local users to cause a denial of service or possibly have other unspecified impacts via a large AIO iovec. This problem exists due to a regression of a previously fixed issue.

Recommendations For Linux kernel version 4.0, consider applying a patch to fix the integer overflow in the aio setup single vector function to prevent potential denial of service or other unspecified impacts.

Exploit

Fix

Related Identifiers

CESA-2018_1854

CESA-2018_3083

CVE-2015-8830

DSA-3503-1

OPENSUSE-SU-2016_2144-1

RHSA-2018:1854

RHSA-2018:3083

RHSA-2018:3096

RHSA-2018_1854

RHSA-2018_3083

RHSA-2018_3096

USN-2968-1

USN-2968-2

USN-2969-1

USN-2970-1

Affected Products

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 59

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_priv_esc_ipv4.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/af_packet_packet_set_ring_priv_esc.rb · Exploit
• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2017-7308 · Exploit
• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384 · Exploit
• 🔥 https://github.com/hardenedlinux/offensive_poc/tree/master/CVE-2017-8890 · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/thinkycx/CVE-2017-8890 · Exploit
• 🔥 https://github.com/beraphin/CVE-2017-8890 · Exploit
• 🔥 https://github.com/mmxsrup/CVE-2018-3639 · Exploit
• 🔥 https://github.com/GeneBlue/CVE-2017-10661_POC · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• https://github.com/torvalds/linux/commit/c4f4b82694fe48b02f7a881a1797131a6dad1364 · Vendor Advisory
• https://github.com/torvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2188 · Vendor Advisory