NVD

Id
26783  
Name
CVE-2015-5697  
Description
The get_bitmap_file function in drivers/md/md.c in the Linux kernel before 4.1.6 does not initialize a certain bitmap data structure, which allows local users to obtain sensitive information from kernel memory via a GET_BITMAP_FILE ioctl call.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-08-31  
Modified Date
2016-12-21  
Seq
2015-5697  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
141705 26783 CVE-2015-5697 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b6878d9e03043695dbf3fa1caa6dfc09db225b16  View
141706 26783 CVE-2015-5697 FEDORA-2015-12908  View
141707 26783 CVE-2015-5697 FEDORA-2015-12917  View
141708 26783 CVE-2015-5697 FEDORA-2015-13396  View
141709 26783 CVE-2015-5697 FEDORA-2015-13391  View
141710 26783 CVE-2015-5697 SUSE-SU-2015:1727  View
141711 26783 CVE-2015-5697 DSA-3329  View
141712 26783 CVE-2015-5697 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6  View
141713 26783 CVE-2015-5697 [oss-security] 20150728 CVE request: Linux kernel - information leak in md driver  View
141714 26783 CVE-2015-5697 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
141715 26783 CVE-2015-5697 76066  View
141716 26783 CVE-2015-5697 USN-2731-1  View
141717 26783 CVE-2015-5697 USN-2732-1  View
141718 26783 CVE-2015-5697 USN-2748-1  View
141719 26783 CVE-2015-5697 USN-2749-1  View
141720 26783 CVE-2015-5697 USN-2751-1  View
141721 26783 CVE-2015-5697 USN-2752-1  View
141722 26783 CVE-2015-5697 USN-2777-1  View
141723 26783 CVE-2015-5697 https://bugzilla.redhat.com/show_bug.cgi?id=1249011  View
141724 26783 CVE-2015-5697 https://github.com/torvalds/linux/commit/b6878d9e03043695dbf3fa1caa6dfc09db225b16  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9199 JVNDB-2015-004519 Linux Kernel の drivers/md/md.c の get_bitmap_file 関数における重要な情報を取得される脆弱性 Linux Kernel の drivers/md/md.c の get_bitmap_file 関数は、特定のビットマップデータ構造を初期化しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2015-5697 82922 CVE-2015-5697 26783 2.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004519.html 2015-08-16 2015-09-01 View