Published: 31/08/2015 Updated: 13/08/2020

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Use-after-free vulnerability in the path_openat function in fs/namei.c in the Linux kernel 3.x and 4.x prior to 4.0.4 allows local users to cause a denial of service or possibly have unspecified other impact via O_TMPFILE filesystem operations that leverage a duplicate cleanup operation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 12.04
canonical ubuntu linux 14.04
debian debian linux 7.0
debian debian linux 8.0

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak CVE-2015-1333 Colin Ian King discovered a flaw in the add_key function of the Linux kernel's keyring subsystem A local user can exploit this flaw to cause a denial of service due to memory ex ...

Several security issues were fixed in the kernel ...

A use-after-free flaw was found in the Linux kernels function path_openat() in which incorrectly clears up twice (as part of path_lookupat() called by do_tmpfile()) Clearing twice can lead to a double fput() A local, unauthenticated user could exploit this flaw to possibly cause a denial of service ...

CWE-416 https://bugzilla.redhat.com/show_bug.cgi?id=1250047 http://twitter.com/grsecurity/statuses/597127122910490624 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f15133df088ecadd141ea1907f2c96df67c729f0 http://www.openwall.com/lists/oss-security/2015/08/01/5 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.4 https://github.com/torvalds/linux/commit/f15133df088ecadd141ea1907f2c96df67c729f0 http://www.securityfocus.com/bid/76142 http://www.debian.org/security/2015/dsa-3329 http://www.ubuntu.com/usn/USN-2681-1 http://www.ubuntu.com/usn/USN-2680-1 https://source.android.com/security/bulletin/2017-01-01.html https://nvd.nist.gov https://www.debian.org/security/./dsa-3329 https://usn.ubuntu.com/2667-1/https://access.redhat.com/security/cve/cve-2015-5706

CVE-2015-5706

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect