PT-2017-1995 · Linux+2 · Linux Kernel+2

Published 2015-02-17 · Updated 2023-12-28 · CVE-2014-9940

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.19

Description The issue is related to the regulator ena gpio free function in drivers/regulator/core.c, which allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted application. This is due to a use-after-free error, where memory is accessed after it has been freed. The exploitation of this issue can lead to privilege escalation or a denial of service.

Recommendations For Linux kernel versions prior to 3.19, update to version 3.19 or later to resolve the issue. As a temporary workaround, consider restricting access to the regulator ena gpio free function to minimize the risk of exploitation.

Exploit

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2015-1186

ALT-PU-2015-1849

BDU:2017-01160

CVE-2014-9940

DSA-3945-1

USN-3343-1

USN-3343-2

Affected Products

Alt Linux

Linux Kernel

Ubuntu

References · 46

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/fi01/CVE-2015-3636 · Exploit
• 🔥 https://github.com/hardenedlinux/offensive_poc/tree/master/CVE-2017-7533 · Exploit
• 🔥 https://github.com/hardenedlinux/offensive_poc/tree/master/CVE-2017-8890 · Exploit
• 🔥 https://github.com/android-rooting-tools/libpingpong_exploit · Exploit
• 🔥 https://github.com/thinkycx/CVE-2017-8890 · Exploit
• 🔥 https://github.com/beraphin/CVE-2017-8890 · Exploit
• 🔥 https://github.com/lexfo/cve-2017-11176 · Exploit
• 🔥 https://github.com/a7vinx/CVE-2015-3636 · Exploit
• 🔥 https://github.com/askk/libping_unhash_exploit_POC · Exploit
• 🔥 https://github.com/hhj4ck/CVE-2016-2067 · Exploit
• 🔥 https://github.com/0x1ns4n3/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://github.com/elit3pwner/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://github.com/x1ns4n3/CVE-2015-1328-GoldenEye · Exploit