Published: 31/08/2015 Updated: 21/09/2017

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 188

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

The get_bitmap_file function in drivers/md/md.c in the Linux kernel prior to 4.1.6 does not initialize a certain bitmap data structure, which allows local users to obtain sensitive information from kernel memory via a GET_BITMAP_FILE ioctl call.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak CVE-2015-1333 Colin Ian King discovered a flaw in the add_key function of the Linux kernel's keyring subsystem A local user can exploit this flaw to cause a denial of service due to memory ex ...

Several security issues were fixed in the kernel ...

The system could be made to expose sensitive information ...

Several security issues were fixed in the kernel ...

The system could be made to expose sensitive information ...

Several security issues were fixed in the kernel ...

A cross-boundary flaw was discovered in the Linux kernel software raid driver The driver accessed a disabled bitmap where only the first byte of the buffer was initialized to zero This meant that the rest of the request (up to 4095 bytes) was left and copied into user space An attacker could use this flaw to read private information from user ...

CWE-200 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6 http://www.openwall.com/lists/oss-security/2015/07/28/2 https://bugzilla.redhat.com/show_bug.cgi?id=1249011 https://github.com/torvalds/linux/commit/b6878d9e03043695dbf3fa1caa6dfc09db225b16 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b6878d9e03043695dbf3fa1caa6dfc09db225b16 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html http://www.securityfocus.com/bid/76066 http://www.ubuntu.com/usn/USN-2777-1 http://www.ubuntu.com/usn/USN-2748-1 http://www.ubuntu.com/usn/USN-2752-1 http://www.ubuntu.com/usn/USN-2751-1 http://www.debian.org/security/2015/dsa-3329 http://www.ubuntu.com/usn/USN-2749-1 http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html http://www.ubuntu.com/usn/USN-2732-1 http://www.ubuntu.com/usn/USN-2731-1 http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164193.html http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164137.html http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163711.html http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163661.html http://www.securitytracker.com/id/1033211 https://www.debian.org/security/./dsa-3329 https://nvd.nist.gov https://usn.ubuntu.com/2749-1/https://access.redhat.com/security/cve/cve-2015-5697

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-5697

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect