CVE

Id
80107  
CVE No.
CVE-2015-2830  
Status
Candidate  
Description
arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.  
Phase
Assigned (20150402)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
725596 80107 CVE-2015-2830 MLIST:[oss-security] 20150401 CVE Request: Linux mishandles int80 fork from 64-bit tasks  View
725597 80107 CVE-2015-2830 URL:http://www.openwall.com/lists/oss-security/2015/04/02/1  View
725598 80107 CVE-2015-2830 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=956421fbb74c3a6261903f3836c0740187cf038b  View
725599 80107 CVE-2015-2830 CONFIRM:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.2  View
725600 80107 CVE-2015-2830 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1208598  View
725601 80107 CVE-2015-2830 CONFIRM:https://github.com/torvalds/linux/commit/956421fbb74c3a6261903f3836c0740187cf038b  View
725602 80107 CVE-2015-2830 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
725603 80107 CVE-2015-2830 DEBIAN:DSA-3237  View
725604 80107 CVE-2015-2830 URL:http://www.debian.org/security/2015/dsa-3237  View
725605 80107 CVE-2015-2830 SUSE:SUSE-SU-2015:1478  View
725606 80107 CVE-2015-2830 URL:http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html  View
725607 80107 CVE-2015-2830 SUSE:SUSE-SU-2015:1592  View
725608 80107 CVE-2015-2830 URL:http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html  View
725609 80107 CVE-2015-2830 SUSE:SUSE-SU-2015:1611  View
725610 80107 CVE-2015-2830 URL:http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html  View
725611 80107 CVE-2015-2830 UBUNTU:USN-2631-1  View
725612 80107 CVE-2015-2830 URL:http://www.ubuntu.com/usn/USN-2631-1  View
725613 80107 CVE-2015-2830 UBUNTU:USN-2632-1  View
725614 80107 CVE-2015-2830 URL:http://www.ubuntu.com/usn/USN-2632-1  View
725615 80107 CVE-2015-2830 SECTRACK:1032413  View

Related JVN