CVE-2015-7312

 

Published at: - 16-11-2015 12:59

Last modified: - 26-10-2022 01:44

Total changes: - 4

Description

Multiple race conditions in the Advanced Union Filesystem (aufs) aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service (use-after-free and BUG) or possibly gain privileges via a (1) madvise or (2) msync system call, related to mm/madvise.c and mm/msync.c.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:M/Au:N/C:P/I:P/A:P

 

Verification logic

 

Reference

• [oss-security] 20150922 Re: CVE request: Use-after-free in Linux kernel with aufs mmap patch-Mailing List, Third Party Advisory
• [aufs] 20150910 Re: concurrent msync triggers NULL pointer dereference-Exploit, Third Party Advisory
• USN-2777-1-Third Party Advisory
• DSA-3364-Third Party Advisory

 

Keywords

NVD

 

CVE-2015-7312

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures