csaf_redhat - rhsa-2015

rhsa-2015_2411

Vulnerability from csaf_redhat

Published

2015-11-19 06:24

Modified

2024-11-05 19:06

Summary

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Notes

Topic

Updated kernel-rt packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. * A flaw was found in the way the Linux kernel's file system implementation handled rename operations in which the source was inside and the destination was outside of a bind mount. A privileged user inside a container could use this flaw to escape the bind mount and, potentially, escalate their privileges on the system. (CVE-2015-2925, Important) * A race condition flaw was found in the way the Linux kernel's IPC subsystem initialized certain fields in an IPC object structure that were later used for permission checking before inserting the object into a globally visible list. A local, unprivileged user could potentially use this flaw to elevate their privileges on the system. (CVE-2015-7613, Important) * It was found that the Linux kernel memory resource controller's (memcg) handling of OOM (out of memory) conditions could lead to deadlocks. An attacker able to continuously spawn new processes within a single memory-constrained cgroup during an OOM event could use this flaw to lock up the system. (CVE-2014-8171, Moderate) * A race condition flaw was found between the chown and execve system calls. When changing the owner of a setuid user binary to root, the race condition could momentarily make the binary setuid root. A local, unprivileged user could potentially use this flaw to escalate their privileges on the system. (CVE-2015-3339, Moderate) * A flaw was discovered in the way the Linux kernel's TTY subsystem handled the tty shutdown phase. A local, unprivileged user could use this flaw to cause a denial of service on the system by holding a reference to the ldisc lock during tty shutdown, causing a deadlock. (CVE-2015-4170, Moderate) * A NULL pointer dereference flaw was found in the SCTP implementation. A local user could use this flaw to cause a denial of service on the system by triggering a kernel panic when creating multiple sockets in parallel while the system did not have the SCTP module loaded. (CVE-2015-5283, Moderate) * A flaw was found in the way the Linux kernel's Crypto subsystem handled automatic loading of kernel modules. A local user could use this flaw to load any installed kernel module, and thus increase the attack surface of the running kernel. (CVE-2013-7421, CVE-2014-9644, Low) * An information leak flaw was found in the way the Linux kernel changed certain segment registers and thread-local storage (TLS) during a context switch. A local, unprivileged user could use this flaw to leak the user space TLS base address of an arbitrary process. (CVE-2014-9419, Low) * A flaw was found in the way the Linux kernel handled the securelevel functionality after performing a kexec operation. A local attacker could use this flaw to bypass the security mechanism of the securelevel/secureboot combination. (CVE-2015-7837, Low) Red Hat would like to thank Linn Crosetto of HP for reporting the CVE-2015-7837 issue. The CVE-2015-5283 issue was discovered by Ji Jianwen from Red Hat engineering. The kernel-rt packages have been upgraded to version 3.10.0-326.rt56.204, which provides a number of bug fixes and enhancements. (BZ#1201915, BZ#1211724) This update also fixes several bugs and adds multiple enhancements. Refer to the following Red Hat Knowledgebase article for information on the most significant of these changes: https://access.redhat.com/articles/2055783 All kernel-rt users are advised to upgrade to these updated packages, which correct these issues and add these enhancements. The system must be rebooted for this update to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated kernel-rt packages that fix multiple security issues, several bugs,\nand add various enhancements are now available for Red Hat Enterprise\nLinux 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The kernel-rt packages contain the Linux kernel, the core of any Linux\noperating system.\n\n* A flaw was found in the way the Linux kernel\u0027s file system implementation\nhandled rename operations in which the source was inside and the\ndestination was outside of a bind mount. A privileged user inside a\ncontainer could use this flaw to escape the bind mount and, potentially,\nescalate their privileges on the system. (CVE-2015-2925, Important)\n\n* A race condition flaw was found in the way the Linux kernel\u0027s IPC\nsubsystem initialized certain fields in an IPC object structure that were\nlater used for permission checking before inserting the object into a\nglobally visible list. A local, unprivileged user could potentially use\nthis flaw to elevate their privileges on the system. (CVE-2015-7613,\nImportant)\n\n* It was found that the Linux kernel memory resource controller\u0027s (memcg)\nhandling of OOM (out of memory) conditions could lead to deadlocks.\nAn attacker able to continuously spawn new processes within a single\nmemory-constrained cgroup during an OOM event could use this flaw to lock\nup the system. (CVE-2014-8171, Moderate)\n\n* A race condition flaw was found between the chown and execve system\ncalls. When changing the owner of a setuid user binary to root, the race\ncondition could momentarily make the binary setuid root. A local,\nunprivileged user could potentially use this flaw to escalate their\nprivileges on the system. (CVE-2015-3339, Moderate)\n\n* A flaw was discovered in the way the Linux kernel\u0027s TTY subsystem handled\nthe tty shutdown phase. A local, unprivileged user could use this flaw to\ncause a denial of service on the system by holding a reference to the ldisc\nlock during tty shutdown, causing a deadlock. (CVE-2015-4170, Moderate)\n\n* A NULL pointer dereference flaw was found in the SCTP implementation.\nA local user could use this flaw to cause a denial of service on the system\nby triggering a kernel panic when creating multiple sockets in parallel\nwhile the system did not have the SCTP module loaded. (CVE-2015-5283,\nModerate)\n\n* A flaw was found in the way the Linux kernel\u0027s Crypto subsystem handled\nautomatic loading of kernel modules. A local user could use this flaw to\nload any installed kernel module, and thus increase the attack surface of\nthe running kernel. (CVE-2013-7421, CVE-2014-9644, Low)\n\n* An information leak flaw was found in the way the Linux kernel changed\ncertain segment registers and thread-local storage (TLS) during a context\nswitch. A local, unprivileged user could use this flaw to leak the user\nspace TLS base address of an arbitrary process. (CVE-2014-9419, Low)\n\n* A flaw was found in the way the Linux kernel handled the securelevel\nfunctionality after performing a kexec operation. A local attacker could\nuse this flaw to bypass the security mechanism of the\nsecurelevel/secureboot combination. (CVE-2015-7837, Low)\n\nRed Hat would like to thank Linn Crosetto of HP for reporting the\nCVE-2015-7837 issue. The CVE-2015-5283 issue was discovered by Ji Jianwen\nfrom Red Hat engineering.\n\nThe kernel-rt packages have been upgraded to version 3.10.0-326.rt56.204,\nwhich provides a number of bug fixes and enhancements. (BZ#1201915,\nBZ#1211724)\n\nThis update also fixes several bugs and adds multiple enhancements.\nRefer to the following Red Hat Knowledgebase article for information on the\nmost significant of these changes:\n\nhttps://access.redhat.com/articles/2055783\n\nAll kernel-rt users are advised to upgrade to these updated packages, which\ncorrect these issues and add these enhancements. The system must be\nrebooted for this update to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2015:2411",
        "url": "https://access.redhat.com/errata/RHSA-2015:2411"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/articles/2055783",
        "url": "https://access.redhat.com/articles/2055783"
      },
      {
        "category": "external",
        "summary": "1177260",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1177260"
      },
      {
        "category": "external",
        "summary": "1185469",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469"
      },
      {
        "category": "external",
        "summary": "1190546",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546"
      },
      {
        "category": "external",
        "summary": "1198109",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198109"
      },
      {
        "category": "external",
        "summary": "1209190",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209190"
      },
      {
        "category": "external",
        "summary": "1209367",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209367"
      },
      {
        "category": "external",
        "summary": "1211724",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1211724"
      },
      {
        "category": "external",
        "summary": "1214030",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1214030"
      },
      {
        "category": "external",
        "summary": "1218879",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1218879"
      },
      {
        "category": "external",
        "summary": "1230391",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1230391"
      },
      {
        "category": "external",
        "summary": "1230395",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1230395"
      },
      {
        "category": "external",
        "summary": "1257528",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1257528"
      },
      {
        "category": "external",
        "summary": "1265251",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1265251"
      },
      {
        "category": "external",
        "summary": "1268270",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1268270"
      },
      {
        "category": "external",
        "summary": "1272472",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1272472"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2411.json"
      }
    ],
    "title": "Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2024-11-05T19:06:35+00:00",
      "generator": {
        "date": "2024-11-05T19:06:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2015:2411",
      "initial_release_date": "2015-11-19T06:24:06+00:00",
      "revision_history": [
        {
          "date": "2015-11-19T06:24:06+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2015-11-19T06:24:06+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T19:06:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux for Real Time (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux for Real Time (v. 7)",
                  "product_id": "7Server-RT",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras_rt:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
                "product": {
                  "name": "kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_id": "kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@3.10.0-327.rt56.204.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
                "product": {
                  "name": "kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_id": "kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-devel@3.10.0-327.rt56.204.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
                "product": {
                  "name": "kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_id": "kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-debuginfo@3.10.0-327.rt56.204.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_id": "kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo@3.10.0-327.rt56.204.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_id": "kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@3.10.0-327.rt56.204.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_id": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64@3.10.0-327.rt56.204.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_id": "kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug@3.10.0-327.rt56.204.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
                "product": {
                  "name": "kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_id": "kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-devel@3.10.0-327.rt56.204.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64",
                "product": {
                  "name": "kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_id": "kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-devel@3.10.0-327.rt56.204.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
                "product": {
                  "name": "kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_id": "kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace@3.10.0-327.rt56.204.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
                "product": {
                  "name": "kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
                  "product_id": "kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-doc@3.10.0-327.rt56.204.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-0:3.10.0-327.rt56.204.el7.src",
                "product": {
                  "name": "kernel-rt-0:3.10.0-327.rt56.204.el7.src",
                  "product_id": "kernel-rt-0:3.10.0-327.rt56.204.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@3.10.0-327.rt56.204.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.0-327.rt56.204.el7.src as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src"
        },
        "product_reference": "kernel-rt-0:3.10.0-327.rt56.204.el7.src",
        "relates_to_product_reference": "7Server-RT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64"
        },
        "product_reference": "kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
        "relates_to_product_reference": "7Server-RT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
        "relates_to_product_reference": "7Server-RT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
        "relates_to_product_reference": "7Server-RT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64"
        },
        "product_reference": "kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
        "relates_to_product_reference": "7Server-RT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
        "relates_to_product_reference": "7Server-RT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
        "relates_to_product_reference": "7Server-RT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64"
        },
        "product_reference": "kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
        "relates_to_product_reference": "7Server-RT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch"
        },
        "product_reference": "kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
        "relates_to_product_reference": "7Server-RT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
        "relates_to_product_reference": "7Server-RT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
        "relates_to_product_reference": "7Server-RT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)",
          "product_id": "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
        },
        "product_reference": "kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64",
        "relates_to_product_reference": "7Server-RT"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2013-7421",
      "cwe": {
        "id": "CWE-749",
        "name": "Exposed Dangerous Method or Function"
      },
      "discovery_date": "2015-01-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1185469"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the way the Linux kernel\u0027s Crypto subsystem handled automatic loading of kernel modules. A local user could use this flaw to load any installed kernel module, and thus increase the attack surface of the running kernel.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: crypto api unprivileged arbitrary module load via request_module()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the versions of the kernel as shipped\nwith Red Hat Enterprise Linux 4, 5, and 6.\n\nThis issue affects the versions of the Linux as shipped with Red Hat Enterprise Linux 7. Red Hat Product Security has rated this issue as having Low  security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
          "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-7421"
        },
        {
          "category": "external",
          "summary": "RHBZ#1185469",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-7421",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-7421"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7421",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7421"
        }
      ],
      "release_date": "2013-03-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-19T06:24:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2411"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: crypto api unprivileged arbitrary module load via request_module()"
    },
    {
      "cve": "CVE-2014-8171",
      "cwe": {
        "id": "CWE-833",
        "name": "Deadlock"
      },
      "discovery_date": "2014-11-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1198109"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the Linux kernel memory resource controller\u0027s (memcg) handling of OOM (out of memory) conditions could lead to deadlocks. An attacker able to continuously spawn new processes within a single memory-constrained cgroup during an OOM event could use this flaw to lock up the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: memcg: OOM handling DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel versions as shipped with Red Hat Enterprise Linux 5. This issue does affect the Linux kernel versions as shipped with Red Hat Enterprise Linux 6, 7 and Red Hat Enterprise MRG 2. Future updates may address this issue in the respective releases.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
          "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-8171"
        },
        {
          "category": "external",
          "summary": "RHBZ#1198109",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198109"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8171",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-8171"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8171",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8171"
        }
      ],
      "release_date": "2015-04-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-19T06:24:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2411"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 5.7,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: memcg: OOM handling DoS"
    },
    {
      "cve": "CVE-2014-9419",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2014-12-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1177260"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An information leak flaw was found in the way the Linux kernel changed certain segment registers and thread-local storage (TLS) during a context switch. A local, unprivileged user could use this flaw to leak the user space TLS base address of an arbitrary process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: partial ASLR bypass through TLS base addresses leak",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 7 may address this issue.\n\nThis issue has been rated as having Low security impact and is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
          "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-9419"
        },
        {
          "category": "external",
          "summary": "RHBZ#1177260",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1177260"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-9419",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-9419"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9419",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9419"
        }
      ],
      "release_date": "2014-12-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-19T06:24:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2411"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 1.9,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: partial ASLR bypass through TLS base addresses leak"
    },
    {
      "cve": "CVE-2014-9644",
      "cwe": {
        "id": "CWE-749",
        "name": "Exposed Dangerous Method or Function"
      },
      "discovery_date": "2015-01-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1190546"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the way the Linux kernel\u0027s Crypto subsystem handled automatic loading of kernel modules. A local user could use this flaw to load any installed kernel module, and thus increase the attack surface of the running kernel.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: crypto api unprivileged arbitrary module load via request_module()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the versions of the kernel as shipped\nwith Red Hat Enterprise Linux 4, 5, and 6.\n\nThis issue affects the versions of the Linux as shipped with Red Hat Enterprise Linux 7. Red Hat Product Security has rated this issue as having Low  security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
          "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-9644"
        },
        {
          "category": "external",
          "summary": "RHBZ#1190546",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-9644",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-9644"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9644",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9644"
        }
      ],
      "release_date": "2013-03-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-19T06:24:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2411"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: crypto api unprivileged arbitrary module load via request_module()"
    },
    {
      "cve": "CVE-2015-2925",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2015-04-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1209367"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the way the Linux kernel\u0027s file system implementation handled rename operations in which the source was inside and the destination was outside of a bind mount. A privileged user inside a container could use this flaw to escape the bind mount and, potentially, escalate their privileges on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: vfs: Do not allow escaping from bind mounts",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.\n\nThis issue affects the versions of Linux kernel as shipped with Red Hat Enterprise Linux 6 and 7 and Red Hat Enterprise MRG 2. Future kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
          "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-2925"
        },
        {
          "category": "external",
          "summary": "RHBZ#1209367",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209367"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-2925",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-2925"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-2925",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2925"
        }
      ],
      "release_date": "2015-04-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-19T06:24:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2411"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Kernel: vfs: Do not allow escaping from bind mounts"
    },
    {
      "cve": "CVE-2015-3339",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "discovery_date": "2015-04-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1214030"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A race condition flaw was found between the chown and execve system calls. When changing the owner of a setuid user binary to root, the race condition could momentarily make the binary setuid root. A local, unprivileged user could potentially use this flaw to escalate their privileges on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: race condition between chown() and execve()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 7 and MRG-2. This issue is not currently planned to be addressed in future Red Hat Enterprise Linux 5 kernel updates.  Future Linux kernel updates for other releases may address this issue.\n\nFor additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
          "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-3339"
        },
        {
          "category": "external",
          "summary": "RHBZ#1214030",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1214030"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-3339",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-3339"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3339",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3339"
        }
      ],
      "release_date": "2015-04-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-19T06:24:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2411"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: race condition between chown() and execve()"
    },
    {
      "cve": "CVE-2015-4170",
      "cwe": {
        "id": "CWE-667",
        "name": "Improper Locking"
      },
      "discovery_date": "2015-01-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1218879"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in the way the Linux kernel\u0027s TTY subsystem handled the tty shutdown phase. A local, unprivileged user could use this flaw to cause denial of service on the system by holding a reference to the ldisc lock during tty shutdown, causing a deadlock.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: pty layer race condition on tty ldisc shutdown.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernels as shipped with Red Hat Enterprise Linux 5, 6.\n\nThis issue affects the Linux kernel packages kernel as shipped with Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
          "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-4170"
        },
        {
          "category": "external",
          "summary": "RHBZ#1218879",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1218879"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-4170",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-4170"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-4170",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4170"
        }
      ],
      "release_date": "2015-01-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-19T06:24:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2411"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.7,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: pty layer race condition on tty ldisc shutdown."
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Ji Jianwen"
          ],
          "organization": "Red Hat engineering",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2015-5283",
      "cwe": {
        "id": "CWE-665",
        "name": "Improper Initialization"
      },
      "discovery_date": "2015-08-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1257528"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A NULL pointer dereference flaw was found in the SCTP implementation. A local user could use this flaw to cause a denial of service on the system by triggering a kernel panic when creating multiple sockets in parallel while the system did not have the SCTP module loaded.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Creating multiple sockets when SCTP module isn\u0027t loaded leads to kernel panic",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the Linux kernels as shipped with Red Hat Enterprise Linux 5, 6 and 7. Due to the limited security impact the issue is currently not planned to be addressed in Red Hat Enterprise Linux 5 and 6.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
          "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-5283"
        },
        {
          "category": "external",
          "summary": "RHBZ#1257528",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1257528"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-5283",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-5283"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-5283",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5283"
        }
      ],
      "release_date": "2015-09-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-19T06:24:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2411"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.7,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: Creating multiple sockets when SCTP module isn\u0027t loaded leads to kernel panic"
    },
    {
      "cve": "CVE-2015-7613",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "discovery_date": "2015-10-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1268270"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A race condition flaw was found in the way the Linux kernel\u0027s IPC subsystem initialized certain fields in an IPC object structure that were later used for permission checking before inserting the object into a globally visible list. A local, unprivileged user could potentially use this flaw to elevate their privileges on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: Unauthorized access to IPC objects with SysV shm",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernels as shipped with Red Hat Enterprise Linux 5.\n\nThis issue affects the Linux kernels as shipped with Red Hat Enterprise Linux 6, 7 and Red Hat MRG 2 kernels. Future kernel updates for the respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
          "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-7613"
        },
        {
          "category": "external",
          "summary": "RHBZ#1268270",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1268270"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-7613",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-7613"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7613",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7613"
        }
      ],
      "release_date": "2015-10-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-19T06:24:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2411"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: Unauthorized access to IPC objects with SysV shm"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Linn Crosetto"
          ],
          "organization": "HP"
        }
      ],
      "cve": "CVE-2015-7837",
      "cwe": {
        "id": "CWE-456",
        "name": "Missing Initialization of a Variable"
      },
      "discovery_date": "2015-07-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1272472"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the way the Linux kernel handled the securelevel functionality after performing a kexec operation. A local attacker could use this flaw to bypass the security mechanism of the securelevel/secureboot combination.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: securelevel disabled after kexec",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernels as shipped with Red Hat Enterprise Linux 5 and 6.\n\nThis issue affects the Linux kernels as shipped with Red Hat Enterprise Linux 7, kernel-rt and MRG-2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
          "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
          "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
          "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-7837"
        },
        {
          "category": "external",
          "summary": "RHBZ#1272472",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1272472"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-7837",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-7837"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7837",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7837"
        }
      ],
      "release_date": "2015-10-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-19T06:24:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2411"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 1.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.src",
            "7Server-RT:kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch",
            "7Server-RT:kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64",
            "7Server-RT:kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: securelevel disabled after kexec"
    }
  ]
}

cve-2015-7613

Vulnerability from cvelistv5

Published

2015-10-19 10:00

Modified

2024-08-06 07:51

Severity ?

Summary

Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-2636.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2015/dsa-3372	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2765-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2792-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2762-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html	vendor-advisory, x_refsource_SUSE
	https://github.com/torvalds/linux/commit/b9a532277938798b53178d5a66af6e2915cb27cf	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2763-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1034094	vdb-entry, x_refsource_SECTRACK
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a532277938798b53178d5a66af6e2915cb27cf	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1034592	vdb-entry, x_refsource_SECTRACK
	https://kc.mcafee.com/corporate/index?page=content&id=SB10146	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1268270	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2764-1	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2015/10/01/8	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/76977	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2761-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html	vendor-advisory, x_refsource_SUSE

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:51:28.498Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:2636",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-2636.html"
          },
          {
            "name": "DSA-3372",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3372"
          },
          {
            "name": "SUSE-SU-2015:2089",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html"
          },
          {
            "name": "USN-2765-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2765-1"
          },
          {
            "name": "USN-2792-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2792-1"
          },
          {
            "name": "USN-2762-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2762-1"
          },
          {
            "name": "SUSE-SU-2015:2087",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html"
          },
          {
            "name": "SUSE-SU-2015:1727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/b9a532277938798b53178d5a66af6e2915cb27cf"
          },
          {
            "name": "USN-2763-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2763-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "1034094",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034094"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a532277938798b53178d5a66af6e2915cb27cf"
          },
          {
            "name": "1034592",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034592"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10146"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1268270"
          },
          {
            "name": "SUSE-SU-2015:2091",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html"
          },
          {
            "name": "USN-2764-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2764-1"
          },
          {
            "name": "[oss-security] 20151001 CVE Request: Unauthorized access to IPC objects with SysV shm",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/10/01/8"
          },
          {
            "name": "76977",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/76977"
          },
          {
            "name": "SUSE-SU-2015:2084",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html"
          },
          {
            "name": "SUSE-SU-2015:2085",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html"
          },
          {
            "name": "SUSE-SU-2015:2086",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html"
          },
          {
            "name": "USN-2761-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2761-1"
          },
          {
            "name": "SUSE-SU-2015:2090",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-10-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-06T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2015:2636",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-2636.html"
        },
        {
          "name": "DSA-3372",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3372"
        },
        {
          "name": "SUSE-SU-2015:2089",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html"
        },
        {
          "name": "USN-2765-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2765-1"
        },
        {
          "name": "USN-2792-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2792-1"
        },
        {
          "name": "USN-2762-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2762-1"
        },
        {
          "name": "SUSE-SU-2015:2087",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html"
        },
        {
          "name": "SUSE-SU-2015:1727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/b9a532277938798b53178d5a66af6e2915cb27cf"
        },
        {
          "name": "USN-2763-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2763-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "1034094",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034094"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a532277938798b53178d5a66af6e2915cb27cf"
        },
        {
          "name": "1034592",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034592"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10146"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1268270"
        },
        {
          "name": "SUSE-SU-2015:2091",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html"
        },
        {
          "name": "USN-2764-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2764-1"
        },
        {
          "name": "[oss-security] 20151001 CVE Request: Unauthorized access to IPC objects with SysV shm",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/10/01/8"
        },
        {
          "name": "76977",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/76977"
        },
        {
          "name": "SUSE-SU-2015:2084",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html"
        },
        {
          "name": "SUSE-SU-2015:2085",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html"
        },
        {
          "name": "SUSE-SU-2015:2086",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html"
        },
        {
          "name": "USN-2761-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2761-1"
        },
        {
          "name": "SUSE-SU-2015:2090",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-7613",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:2636",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-2636.html"
            },
            {
              "name": "DSA-3372",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3372"
            },
            {
              "name": "SUSE-SU-2015:2089",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html"
            },
            {
              "name": "USN-2765-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2765-1"
            },
            {
              "name": "USN-2792-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2792-1"
            },
            {
              "name": "USN-2762-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2762-1"
            },
            {
              "name": "SUSE-SU-2015:2087",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html"
            },
            {
              "name": "SUSE-SU-2015:1727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/b9a532277938798b53178d5a66af6e2915cb27cf",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/b9a532277938798b53178d5a66af6e2915cb27cf"
            },
            {
              "name": "USN-2763-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2763-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "1034094",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034094"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a532277938798b53178d5a66af6e2915cb27cf",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a532277938798b53178d5a66af6e2915cb27cf"
            },
            {
              "name": "1034592",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034592"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10146",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10146"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1268270",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1268270"
            },
            {
              "name": "SUSE-SU-2015:2091",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html"
            },
            {
              "name": "USN-2764-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2764-1"
            },
            {
              "name": "[oss-security] 20151001 CVE Request: Unauthorized access to IPC objects with SysV shm",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/10/01/8"
            },
            {
              "name": "76977",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/76977"
            },
            {
              "name": "SUSE-SU-2015:2084",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html"
            },
            {
              "name": "SUSE-SU-2015:2085",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html"
            },
            {
              "name": "SUSE-SU-2015:2086",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html"
            },
            {
              "name": "USN-2761-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2761-1"
            },
            {
              "name": "SUSE-SU-2015:2090",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-7613",
    "datePublished": "2015-10-19T10:00:00",
    "dateReserved": "2015-10-01T00:00:00",
    "dateUpdated": "2024-08-06T07:51:28.498Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-5283

Vulnerability from cvelistv5

Published

2015-10-19 10:00

Modified

2024-08-06 06:41

Severity ?

Summary

The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished.

References

▼	URL	Tags
	http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.3	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3372	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1257528	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2826-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/77058	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html	vendor-advisory, x_refsource_SUSE
	https://github.com/torvalds/linux/commit/8e2d61e0aed2b7c4ecb35844fe07e0b2b762dee4	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html	vendor-advisory, x_refsource_SUSE
	https://security-tracker.debian.org/tracker/CVE-2015-5283	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2829-2	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8e2d61e0aed2b7c4ecb35844fe07e0b2b762dee4	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2829-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2823-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id/1033808	vdb-entry, x_refsource_SECTRACK
	http://patchwork.ozlabs.org/patch/515996/	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:41:09.350Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.3"
          },
          {
            "name": "DSA-3372",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3372"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1257528"
          },
          {
            "name": "USN-2826-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2826-1"
          },
          {
            "name": "77058",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77058"
          },
          {
            "name": "SUSE-SU-2015:1727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/8e2d61e0aed2b7c4ecb35844fe07e0b2b762dee4"
          },
          {
            "name": "SUSE-SU-2015:2194",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security-tracker.debian.org/tracker/CVE-2015-5283"
          },
          {
            "name": "USN-2829-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2829-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8e2d61e0aed2b7c4ecb35844fe07e0b2b762dee4"
          },
          {
            "name": "USN-2829-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2829-1"
          },
          {
            "name": "USN-2823-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2823-1"
          },
          {
            "name": "1033808",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033808"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://patchwork.ozlabs.org/patch/515996/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-09-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-06T18:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.3"
        },
        {
          "name": "DSA-3372",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3372"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1257528"
        },
        {
          "name": "USN-2826-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2826-1"
        },
        {
          "name": "77058",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77058"
        },
        {
          "name": "SUSE-SU-2015:1727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/8e2d61e0aed2b7c4ecb35844fe07e0b2b762dee4"
        },
        {
          "name": "SUSE-SU-2015:2194",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security-tracker.debian.org/tracker/CVE-2015-5283"
        },
        {
          "name": "USN-2829-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2829-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8e2d61e0aed2b7c4ecb35844fe07e0b2b762dee4"
        },
        {
          "name": "USN-2829-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2829-1"
        },
        {
          "name": "USN-2823-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2823-1"
        },
        {
          "name": "1033808",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033808"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://patchwork.ozlabs.org/patch/515996/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-5283",
    "datePublished": "2015-10-19T10:00:00",
    "dateReserved": "2015-07-01T00:00:00",
    "dateUpdated": "2024-08-06T06:41:09.350Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-2925

Vulnerability from cvelistv5

Published

2015-11-16 11:00

Modified

2024-08-06 05:32

Severity ?

Summary

The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack."

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-2636.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2015/dsa-3372	vendor-advisory, x_refsource_DEBIAN
	http://permalink.gmane.org/gmane.linux.kernel.containers/29173	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2016-0068.html	vendor-advisory, x_refsource_REDHAT
	http://pkgs.fedoraproject.org/cgit/kernel.git/commit/?h=f22&id=520b64102de2f184036024b2a53de2b67463bd78	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2792-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/73926	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3364	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2794-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2799-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2795-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://permalink.gmane.org/gmane.linux.kernel.containers/29177	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html	vendor-advisory, x_refsource_SUSE
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cde93be45a8a90d8c264c776fab63487b5038a65	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2015/04/04/4	mailing-list, x_refsource_MLIST
	http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.4	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1209367	x_refsource_CONFIRM
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=397d425dc26da728396e66d392d5dcb8dac30c37	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html	vendor-advisory, x_refsource_SUSE
	https://github.com/torvalds/linux/commit/cde93be45a8a90d8c264c776fab63487b5038a65	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1209373	x_refsource_CONFIRM
	https://github.com/torvalds/linux/commit/397d425dc26da728396e66d392d5dcb8dac30c37	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2798-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:32:20.368Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:2292",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html"
          },
          {
            "name": "RHSA-2015:2636",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-2636.html"
          },
          {
            "name": "DSA-3372",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3372"
          },
          {
            "name": "[containers] 20150403 [PATCH review 17/19] vfs: Test for and handle paths that are unreachable from their mnt_root",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://permalink.gmane.org/gmane.linux.kernel.containers/29173"
          },
          {
            "name": "RHSA-2016:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://pkgs.fedoraproject.org/cgit/kernel.git/commit/?h=f22\u0026id=520b64102de2f184036024b2a53de2b67463bd78"
          },
          {
            "name": "SUSE-SU-2016:0337",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html"
          },
          {
            "name": "USN-2792-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2792-1"
          },
          {
            "name": "73926",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/73926"
          },
          {
            "name": "SUSE-SU-2016:0434",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html"
          },
          {
            "name": "DSA-3364",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3364"
          },
          {
            "name": "USN-2794-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2794-1"
          },
          {
            "name": "USN-2799-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2799-1"
          },
          {
            "name": "USN-2795-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2795-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "SUSE-SU-2015:2194",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html"
          },
          {
            "name": "SUSE-SU-2016:0380",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html"
          },
          {
            "name": "SUSE-SU-2016:0335",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "[containers] 20150403 [PATCH review 19/19] vfs: Do not allow escaping from bind mounts.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://permalink.gmane.org/gmane.linux.kernel.containers/29177"
          },
          {
            "name": "SUSE-SU-2016:0383",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cde93be45a8a90d8c264c776fab63487b5038a65"
          },
          {
            "name": "SUSE-SU-2016:0386",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html"
          },
          {
            "name": "[oss-security] 20150404 Re: Linux namespaces: It is possible to escape from bind mounts",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/04/04/4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209367"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=397d425dc26da728396e66d392d5dcb8dac30c37"
          },
          {
            "name": "SUSE-SU-2016:0384",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/cde93be45a8a90d8c264c776fab63487b5038a65"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209373"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/397d425dc26da728396e66d392d5dcb8dac30c37"
          },
          {
            "name": "SUSE-SU-2016:0387",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html"
          },
          {
            "name": "SUSE-SU-2016:0381",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html"
          },
          {
            "name": "USN-2798-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2798-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a \"double-chroot attack.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:2292",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html"
        },
        {
          "name": "RHSA-2015:2636",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-2636.html"
        },
        {
          "name": "DSA-3372",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3372"
        },
        {
          "name": "[containers] 20150403 [PATCH review 17/19] vfs: Test for and handle paths that are unreachable from their mnt_root",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://permalink.gmane.org/gmane.linux.kernel.containers/29173"
        },
        {
          "name": "RHSA-2016:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://pkgs.fedoraproject.org/cgit/kernel.git/commit/?h=f22\u0026id=520b64102de2f184036024b2a53de2b67463bd78"
        },
        {
          "name": "SUSE-SU-2016:0337",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html"
        },
        {
          "name": "USN-2792-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2792-1"
        },
        {
          "name": "73926",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/73926"
        },
        {
          "name": "SUSE-SU-2016:0434",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html"
        },
        {
          "name": "DSA-3364",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3364"
        },
        {
          "name": "USN-2794-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2794-1"
        },
        {
          "name": "USN-2799-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2799-1"
        },
        {
          "name": "USN-2795-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2795-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "SUSE-SU-2015:2194",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html"
        },
        {
          "name": "SUSE-SU-2016:0380",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html"
        },
        {
          "name": "SUSE-SU-2016:0335",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "[containers] 20150403 [PATCH review 19/19] vfs: Do not allow escaping from bind mounts.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://permalink.gmane.org/gmane.linux.kernel.containers/29177"
        },
        {
          "name": "SUSE-SU-2016:0383",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cde93be45a8a90d8c264c776fab63487b5038a65"
        },
        {
          "name": "SUSE-SU-2016:0386",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html"
        },
        {
          "name": "[oss-security] 20150404 Re: Linux namespaces: It is possible to escape from bind mounts",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/04/04/4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209367"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=397d425dc26da728396e66d392d5dcb8dac30c37"
        },
        {
          "name": "SUSE-SU-2016:0384",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/cde93be45a8a90d8c264c776fab63487b5038a65"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209373"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/397d425dc26da728396e66d392d5dcb8dac30c37"
        },
        {
          "name": "SUSE-SU-2016:0387",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html"
        },
        {
          "name": "SUSE-SU-2016:0381",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html"
        },
        {
          "name": "USN-2798-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2798-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-2925",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a \"double-chroot attack.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2015:2292",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html"
            },
            {
              "name": "RHSA-2015:2636",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-2636.html"
            },
            {
              "name": "DSA-3372",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3372"
            },
            {
              "name": "[containers] 20150403 [PATCH review 17/19] vfs: Test for and handle paths that are unreachable from their mnt_root",
              "refsource": "MLIST",
              "url": "http://permalink.gmane.org/gmane.linux.kernel.containers/29173"
            },
            {
              "name": "RHSA-2016:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
            },
            {
              "name": "http://pkgs.fedoraproject.org/cgit/kernel.git/commit/?h=f22\u0026id=520b64102de2f184036024b2a53de2b67463bd78",
              "refsource": "CONFIRM",
              "url": "http://pkgs.fedoraproject.org/cgit/kernel.git/commit/?h=f22\u0026id=520b64102de2f184036024b2a53de2b67463bd78"
            },
            {
              "name": "SUSE-SU-2016:0337",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html"
            },
            {
              "name": "USN-2792-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2792-1"
            },
            {
              "name": "73926",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/73926"
            },
            {
              "name": "SUSE-SU-2016:0434",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html"
            },
            {
              "name": "DSA-3364",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3364"
            },
            {
              "name": "USN-2794-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2794-1"
            },
            {
              "name": "USN-2799-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2799-1"
            },
            {
              "name": "USN-2795-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2795-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "SUSE-SU-2015:2194",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html"
            },
            {
              "name": "SUSE-SU-2016:0380",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html"
            },
            {
              "name": "SUSE-SU-2016:0335",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "[containers] 20150403 [PATCH review 19/19] vfs: Do not allow escaping from bind mounts.",
              "refsource": "MLIST",
              "url": "http://permalink.gmane.org/gmane.linux.kernel.containers/29177"
            },
            {
              "name": "SUSE-SU-2016:0383",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cde93be45a8a90d8c264c776fab63487b5038a65",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cde93be45a8a90d8c264c776fab63487b5038a65"
            },
            {
              "name": "SUSE-SU-2016:0386",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html"
            },
            {
              "name": "[oss-security] 20150404 Re: Linux namespaces: It is possible to escape from bind mounts",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/04/04/4"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.4",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.4"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1209367",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209367"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=397d425dc26da728396e66d392d5dcb8dac30c37",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=397d425dc26da728396e66d392d5dcb8dac30c37"
            },
            {
              "name": "SUSE-SU-2016:0384",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/cde93be45a8a90d8c264c776fab63487b5038a65",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/cde93be45a8a90d8c264c776fab63487b5038a65"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1209373",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209373"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/397d425dc26da728396e66d392d5dcb8dac30c37",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/397d425dc26da728396e66d392d5dcb8dac30c37"
            },
            {
              "name": "SUSE-SU-2016:0387",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html"
            },
            {
              "name": "SUSE-SU-2016:0381",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html"
            },
            {
              "name": "USN-2798-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2798-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-2925",
    "datePublished": "2015-11-16T11:00:00",
    "dateReserved": "2015-04-04T00:00:00",
    "dateUpdated": "2024-08-06T05:32:20.368Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-3339

Vulnerability from cvelistv5

Published

2015-05-27 10:00

Modified

2024-08-06 05:47

Severity ?

Summary

Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1032412	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158804.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.redhat.com/show_bug.cgi?id=1214030	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3237	vendor-advisory, x_refsource_DEBIAN
	http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157897.html	vendor-advisory, x_refsource_FEDORA
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2015/04/20/5	mailing-list, x_refsource_MLIST
	http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.6	x_refsource_CONFIRM
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8b01fc86b9f425899f8a3a8fc1c47d73c2c20543	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-1272.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://github.com/torvalds/linux/commit/8b01fc86b9f425899f8a3a8fc1c47d73c2c20543	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:47:57.218Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:1491",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html"
          },
          {
            "name": "1032412",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032412"
          },
          {
            "name": "SUSE-SU-2015:1489",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html"
          },
          {
            "name": "SUSE-SU-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html"
          },
          {
            "name": "FEDORA-2015-8518",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158804.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1214030"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "DSA-3237",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3237"
          },
          {
            "name": "FEDORA-2015-7736",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157897.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "openSUSE-SU-2015:1382",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html"
          },
          {
            "name": "[oss-security] 20150420 Re: Linux: chown() was racy relative to execve() - Linux kernel",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/04/20/5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.6"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8b01fc86b9f425899f8a3a8fc1c47d73c2c20543"
          },
          {
            "name": "SUSE-SU-2016:2074",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html"
          },
          {
            "name": "RHSA-2015:1272",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
          },
          {
            "name": "SUSE-SU-2015:1487",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/8b01fc86b9f425899f8a3a8fc1c47d73c2c20543"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:1491",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html"
        },
        {
          "name": "1032412",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032412"
        },
        {
          "name": "SUSE-SU-2015:1489",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html"
        },
        {
          "name": "SUSE-SU-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html"
        },
        {
          "name": "FEDORA-2015-8518",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158804.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1214030"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "DSA-3237",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3237"
        },
        {
          "name": "FEDORA-2015-7736",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157897.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "openSUSE-SU-2015:1382",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html"
        },
        {
          "name": "[oss-security] 20150420 Re: Linux: chown() was racy relative to execve() - Linux kernel",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/04/20/5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.6"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8b01fc86b9f425899f8a3a8fc1c47d73c2c20543"
        },
        {
          "name": "SUSE-SU-2016:2074",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html"
        },
        {
          "name": "RHSA-2015:1272",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
        },
        {
          "name": "SUSE-SU-2015:1487",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/8b01fc86b9f425899f8a3a8fc1c47d73c2c20543"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-3339",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2015:1491",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html"
            },
            {
              "name": "1032412",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032412"
            },
            {
              "name": "SUSE-SU-2015:1489",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html"
            },
            {
              "name": "SUSE-SU-2015:1488",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html"
            },
            {
              "name": "FEDORA-2015-8518",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158804.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1214030",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1214030"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "DSA-3237",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3237"
            },
            {
              "name": "FEDORA-2015-7736",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157897.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "openSUSE-SU-2015:1382",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html"
            },
            {
              "name": "[oss-security] 20150420 Re: Linux: chown() was racy relative to execve() - Linux kernel",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/04/20/5"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.6",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.6"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8b01fc86b9f425899f8a3a8fc1c47d73c2c20543",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8b01fc86b9f425899f8a3a8fc1c47d73c2c20543"
            },
            {
              "name": "SUSE-SU-2016:2074",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html"
            },
            {
              "name": "RHSA-2015:1272",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1272.html"
            },
            {
              "name": "SUSE-SU-2015:1487",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/8b01fc86b9f425899f8a3a8fc1c47d73c2c20543",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/8b01fc86b9f425899f8a3a8fc1c47d73c2c20543"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-3339",
    "datePublished": "2015-05-27T10:00:00",
    "dateReserved": "2015-04-20T00:00:00",
    "dateUpdated": "2024-08-06T05:47:57.218Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-7421

Vulnerability from cvelistv5

Published

2015-03-02 11:00

Modified

2024-08-06 18:09

Severity ?

Summary

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644.

References

▼	URL	Tags
	https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2016-0068.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2544-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2015/dsa-3170	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2015/01/24/4	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-2546-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	https://lkml.org/lkml/2013/3/4/70	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-2514-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1185469	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2015:057	vendor-advisory, x_refsource_MANDRIVA
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2015:058	vendor-advisory, x_refsource_MANDRIVA
	http://www.ubuntu.com/usn/USN-2545-1	vendor-advisory, x_refsource_UBUNTU
	https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/72322	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-2513-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2543-1	vendor-advisory, x_refsource_UBUNTU
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d26a105b5a73e5635eae0629b42fa0a90e07b7b	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:09:16.533Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
          },
          {
            "name": "RHSA-2016:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
          },
          {
            "name": "USN-2544-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2544-1"
          },
          {
            "name": "DSA-3170",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3170"
          },
          {
            "name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
          },
          {
            "name": "USN-2546-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2546-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "[linux-kernel] 20130304 Re: user ns: arbitrary module loading",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lkml.org/lkml/2013/3/4/70"
          },
          {
            "name": "USN-2514-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2514-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469"
          },
          {
            "name": "MDVSA-2015:057",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
          },
          {
            "name": "MDVSA-2015:058",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
          },
          {
            "name": "USN-2545-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2545-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
          },
          {
            "name": "72322",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72322"
          },
          {
            "name": "USN-2513-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2513-1"
          },
          {
            "name": "USN-2543-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2543-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-03-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
        },
        {
          "name": "RHSA-2016:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
        },
        {
          "name": "USN-2544-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2544-1"
        },
        {
          "name": "DSA-3170",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3170"
        },
        {
          "name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
        },
        {
          "name": "USN-2546-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2546-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "[linux-kernel] 20130304 Re: user ns: arbitrary module loading",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lkml.org/lkml/2013/3/4/70"
        },
        {
          "name": "USN-2514-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2514-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469"
        },
        {
          "name": "MDVSA-2015:057",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
        },
        {
          "name": "MDVSA-2015:058",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
        },
        {
          "name": "USN-2545-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2545-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
        },
        {
          "name": "72322",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72322"
        },
        {
          "name": "USN-2513-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2513-1"
        },
        {
          "name": "USN-2543-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2543-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2013-7421",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu",
              "refsource": "MISC",
              "url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
            },
            {
              "name": "RHSA-2016:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
            },
            {
              "name": "USN-2544-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2544-1"
            },
            {
              "name": "DSA-3170",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3170"
            },
            {
              "name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
            },
            {
              "name": "USN-2546-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2546-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "[linux-kernel] 20130304 Re: user ns: arbitrary module loading",
              "refsource": "MLIST",
              "url": "https://lkml.org/lkml/2013/3/4/70"
            },
            {
              "name": "USN-2514-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2514-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185469"
            },
            {
              "name": "MDVSA-2015:057",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
            },
            {
              "name": "MDVSA-2015:058",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
            },
            {
              "name": "USN-2545-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2545-1"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
            },
            {
              "name": "72322",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72322"
            },
            {
              "name": "USN-2513-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2513-1"
            },
            {
              "name": "USN-2543-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2543-1"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5d26a105b5a73e5635eae0629b42fa0a90e07b7b",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5d26a105b5a73e5635eae0629b42fa0a90e07b7b"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2013-7421",
    "datePublished": "2015-03-02T11:00:00",
    "dateReserved": "2015-01-24T00:00:00",
    "dateUpdated": "2024-08-06T18:09:16.533Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-7837

Vulnerability from cvelistv5

Published

2017-09-19 16:00

Modified

2024-08-06 07:58

Severity ?

Summary

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.

References

▼	URL	Tags
	https://github.com/mjg59/linux/commit/4b2b64d5a6ebc84214755ebccd599baef7c1b798	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1272472	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-2152.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/77097	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2015/10/15/6	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2015-2411.html	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:58:59.990Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/mjg59/linux/commit/4b2b64d5a6ebc84214755ebccd599baef7c1b798"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1272472"
          },
          {
            "name": "RHSA-2015:2152",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-2152.html"
          },
          {
            "name": "77097",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77097"
          },
          {
            "name": "[oss-security] 20151015 Re: CVE Request - Linux kernel - securelevel/secureboot bypass.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/10/15/6"
          },
          {
            "name": "RHSA-2015:2411",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-2411.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-10-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-20T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/mjg59/linux/commit/4b2b64d5a6ebc84214755ebccd599baef7c1b798"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1272472"
        },
        {
          "name": "RHSA-2015:2152",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-2152.html"
        },
        {
          "name": "77097",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77097"
        },
        {
          "name": "[oss-security] 20151015 Re: CVE Request - Linux kernel - securelevel/secureboot bypass.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/10/15/6"
        },
        {
          "name": "RHSA-2015:2411",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-2411.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-7837",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/mjg59/linux/commit/4b2b64d5a6ebc84214755ebccd599baef7c1b798",
              "refsource": "CONFIRM",
              "url": "https://github.com/mjg59/linux/commit/4b2b64d5a6ebc84214755ebccd599baef7c1b798"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1272472",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1272472"
            },
            {
              "name": "RHSA-2015:2152",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-2152.html"
            },
            {
              "name": "77097",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77097"
            },
            {
              "name": "[oss-security] 20151015 Re: CVE Request - Linux kernel - securelevel/secureboot bypass.",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/10/15/6"
            },
            {
              "name": "RHSA-2015:2411",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-2411.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-7837",
    "datePublished": "2017-09-19T16:00:00",
    "dateReserved": "2015-10-15T00:00:00",
    "dateUpdated": "2024-08-06T07:58:59.990Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-9419

Vulnerability from cvelistv5

Published

2014-12-26 00:00

Modified

2024-08-06 13:40

Severity ?

Summary

The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.

References

▼	URL	Tags
	http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html	vendor-advisory, x_refsource_FEDORA
	http://www.ubuntu.com/usn/USN-2515-1	vendor-advisory, x_refsource_UBUNTU
	https://github.com/torvalds/linux/commit/f647d7c155f069c1a068030255c300663516420e	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2542-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2541-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1177260	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2518-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mandriva.com/security/advisories?name=MDVSA-2015:058	vendor-advisory, x_refsource_MANDRIVA
	http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html	vendor-advisory, x_refsource_FEDORA
	http://www.securityfocus.com/bid/71794	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2014/12/25/1	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-2517-1	vendor-advisory, x_refsource_UBUNTU
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f647d7c155f069c1a068030255c300663516420e	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3128	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2516-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2015-1081.html	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:40:25.223Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2015-0517",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html"
          },
          {
            "name": "USN-2515-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2515-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/f647d7c155f069c1a068030255c300663516420e"
          },
          {
            "name": "USN-2542-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2542-1"
          },
          {
            "name": "SUSE-SU-2015:0736",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
          },
          {
            "name": "USN-2541-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2541-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1177260"
          },
          {
            "name": "USN-2518-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2518-1"
          },
          {
            "name": "MDVSA-2015:058",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
          },
          {
            "name": "FEDORA-2015-0515",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html"
          },
          {
            "name": "71794",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/71794"
          },
          {
            "name": "SUSE-SU-2015:0529",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html"
          },
          {
            "name": "[oss-security] 20141225 Re: CVE Request: Linux x86_64 userspace address leak",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/12/25/1"
          },
          {
            "name": "USN-2517-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2517-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f647d7c155f069c1a068030255c300663516420e"
          },
          {
            "name": "openSUSE-SU-2015:0714",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html"
          },
          {
            "name": "DSA-3128",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3128"
          },
          {
            "name": "USN-2516-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2516-1"
          },
          {
            "name": "RHSA-2015:1081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1081.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "FEDORA-2015-0517",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html"
        },
        {
          "name": "USN-2515-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2515-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/f647d7c155f069c1a068030255c300663516420e"
        },
        {
          "name": "USN-2542-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2542-1"
        },
        {
          "name": "SUSE-SU-2015:0736",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
        },
        {
          "name": "USN-2541-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2541-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1177260"
        },
        {
          "name": "USN-2518-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2518-1"
        },
        {
          "name": "MDVSA-2015:058",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
        },
        {
          "name": "FEDORA-2015-0515",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html"
        },
        {
          "name": "71794",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/71794"
        },
        {
          "name": "SUSE-SU-2015:0529",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html"
        },
        {
          "name": "[oss-security] 20141225 Re: CVE Request: Linux x86_64 userspace address leak",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/12/25/1"
        },
        {
          "name": "USN-2517-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2517-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f647d7c155f069c1a068030255c300663516420e"
        },
        {
          "name": "openSUSE-SU-2015:0714",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html"
        },
        {
          "name": "DSA-3128",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3128"
        },
        {
          "name": "USN-2516-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2516-1"
        },
        {
          "name": "RHSA-2015:1081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1081.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-9419",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2015-0517",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html"
            },
            {
              "name": "USN-2515-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2515-1"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/f647d7c155f069c1a068030255c300663516420e",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/f647d7c155f069c1a068030255c300663516420e"
            },
            {
              "name": "USN-2542-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2542-1"
            },
            {
              "name": "SUSE-SU-2015:0736",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html"
            },
            {
              "name": "USN-2541-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2541-1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1177260",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1177260"
            },
            {
              "name": "USN-2518-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2518-1"
            },
            {
              "name": "MDVSA-2015:058",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
            },
            {
              "name": "FEDORA-2015-0515",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html"
            },
            {
              "name": "71794",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/71794"
            },
            {
              "name": "SUSE-SU-2015:0529",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html"
            },
            {
              "name": "[oss-security] 20141225 Re: CVE Request: Linux x86_64 userspace address leak",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/12/25/1"
            },
            {
              "name": "USN-2517-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2517-1"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f647d7c155f069c1a068030255c300663516420e",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f647d7c155f069c1a068030255c300663516420e"
            },
            {
              "name": "openSUSE-SU-2015:0714",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html"
            },
            {
              "name": "DSA-3128",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3128"
            },
            {
              "name": "USN-2516-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2516-1"
            },
            {
              "name": "RHSA-2015:1081",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1081.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-9419",
    "datePublished": "2014-12-26T00:00:00",
    "dateReserved": "2014-12-25T00:00:00",
    "dateUpdated": "2024-08-06T13:40:25.223Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-4170

Vulnerability from cvelistv5

Published

2016-05-02 10:00

Modified

2024-08-06 06:04

Severity ?

Summary

Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and ldsem_down_write deadlock) by establishing a new tty thread during shutdown of a previous tty thread.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1218879	x_refsource_CONFIRM
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203ae	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	https://github.com/torvalds/linux/commit/cf872776fc84128bb779ce2b83a37c884c3203ae	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2015/05/26/1	mailing-list, x_refsource_MLIST
	https://www.kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xz	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2016:1395	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/74820	vdb-entry, x_refsource_BID

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:04:02.976Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1218879"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203ae"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/cf872776fc84128bb779ce2b83a37c884c3203ae"
          },
          {
            "name": "[oss-security] 20150526 CVE request: vulnerability in the kernel tty subsystem.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/05/26/1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xz"
          },
          {
            "name": "RHSA-2016:1395",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1395"
          },
          {
            "name": "74820",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74820"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-05-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and ldsem_down_write deadlock) by establishing a new tty thread during shutdown of a previous tty thread."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-11T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1218879"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203ae"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/cf872776fc84128bb779ce2b83a37c884c3203ae"
        },
        {
          "name": "[oss-security] 20150526 CVE request: vulnerability in the kernel tty subsystem.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/05/26/1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xz"
        },
        {
          "name": "RHSA-2016:1395",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1395"
        },
        {
          "name": "74820",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74820"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-4170",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and ldsem_down_write deadlock) by establishing a new tty thread during shutdown of a previous tty thread."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1218879",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1218879"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203ae",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203ae"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/cf872776fc84128bb779ce2b83a37c884c3203ae",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/cf872776fc84128bb779ce2b83a37c884c3203ae"
            },
            {
              "name": "[oss-security] 20150526 CVE request: vulnerability in the kernel tty subsystem.",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/05/26/1"
            },
            {
              "name": "https://www.kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xz",
              "refsource": "CONFIRM",
              "url": "https://www.kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xz"
            },
            {
              "name": "RHSA-2016:1395",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1395"
            },
            {
              "name": "74820",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74820"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-4170",
    "datePublished": "2016-05-02T10:00:00",
    "dateReserved": "2015-06-02T00:00:00",
    "dateUpdated": "2024-08-06T06:04:02.976Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-9644

Vulnerability from cvelistv5

Published

2015-03-02 11:00

Modified

2024-08-06 13:47

Severity ?

Summary

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421.

References

▼	URL	Tags
	https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2016-0068.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2544-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2015/dsa-3170	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1190546	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2015/01/24/4	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-2546-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2514-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mandriva.com/security/advisories?name=MDVSA-2015:057	vendor-advisory, x_refsource_MANDRIVA
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2015:058	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/bid/72320	vdb-entry, x_refsource_BID
	https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2545-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2513-1	vendor-advisory, x_refsource_UBUNTU
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4943ba16bbc2db05115707b3ff7b4874e9e3c560	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2543-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:47:41.707Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
          },
          {
            "name": "RHSA-2016:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
          },
          {
            "name": "USN-2544-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2544-1"
          },
          {
            "name": "DSA-3170",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3170"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546"
          },
          {
            "name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
          },
          {
            "name": "USN-2546-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2546-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "USN-2514-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2514-1"
          },
          {
            "name": "MDVSA-2015:057",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
          },
          {
            "name": "MDVSA-2015:058",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
          },
          {
            "name": "72320",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560"
          },
          {
            "name": "USN-2545-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2545-1"
          },
          {
            "name": "USN-2513-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2513-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4943ba16bbc2db05115707b3ff7b4874e9e3c560"
          },
          {
            "name": "USN-2543-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2543-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-11-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
        },
        {
          "name": "RHSA-2016:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
        },
        {
          "name": "USN-2544-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2544-1"
        },
        {
          "name": "DSA-3170",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3170"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546"
        },
        {
          "name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
        },
        {
          "name": "USN-2546-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2546-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "USN-2514-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2514-1"
        },
        {
          "name": "MDVSA-2015:057",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
        },
        {
          "name": "MDVSA-2015:058",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
        },
        {
          "name": "72320",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560"
        },
        {
          "name": "USN-2545-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2545-1"
        },
        {
          "name": "USN-2513-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2513-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4943ba16bbc2db05115707b3ff7b4874e9e3c560"
        },
        {
          "name": "USN-2543-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2543-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-9644",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu",
              "refsource": "MISC",
              "url": "https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu"
            },
            {
              "name": "RHSA-2016:0068",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
            },
            {
              "name": "USN-2544-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2544-1"
            },
            {
              "name": "DSA-3170",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3170"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1190546"
            },
            {
              "name": "[oss-security] 20150124 Re: CVE Request: Linux kernel crypto api unprivileged arbitrary module load",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/01/24/4"
            },
            {
              "name": "USN-2546-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2546-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "USN-2514-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2514-1"
            },
            {
              "name": "MDVSA-2015:057",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:057"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5"
            },
            {
              "name": "MDVSA-2015:058",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:058"
            },
            {
              "name": "72320",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72320"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560"
            },
            {
              "name": "USN-2545-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2545-1"
            },
            {
              "name": "USN-2513-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2513-1"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4943ba16bbc2db05115707b3ff7b4874e9e3c560",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4943ba16bbc2db05115707b3ff7b4874e9e3c560"
            },
            {
              "name": "USN-2543-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2543-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-9644",
    "datePublished": "2015-03-02T11:00:00",
    "dateReserved": "2015-01-24T00:00:00",
    "dateUpdated": "2024-08-06T13:47:41.707Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-8171

Vulnerability from cvelistv5

Published

2018-02-09 22:00

Modified

2024-08-06 13:10

Severity ?

Summary

The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a memory-constrained cgroup.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2016-0068.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0864.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-2152.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=1198109	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/74293	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2015-2411.html	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:51.010Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:0068",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
          },
          {
            "name": "RHSA-2015:0864",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
          },
          {
            "name": "RHSA-2015:2152",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-2152.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198109"
          },
          {
            "name": "74293",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74293"
          },
          {
            "name": "RHSA-2015:2411",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-2411.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-03-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a memory-constrained cgroup."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-09T21:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2016:0068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0068.html"
        },
        {
          "name": "RHSA-2015:0864",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0864.html"
        },
        {
          "name": "RHSA-2015:2152",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-2152.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198109"
        },
        {
          "name": "74293",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74293"
        },
        {
          "name": "RHSA-2015:2411",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-2411.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8171",
    "datePublished": "2018-02-09T22:00:00",
    "dateReserved": "2014-10-10T00:00:00",
    "dateUpdated": "2024-08-06T13:10:51.010Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature