NVD

Id
26786  
Name
CVE-2015-5706  
Description
Use-after-free vulnerability in the path_openat function in fs/namei.c in the Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a denial of service or possibly have unspecified other impact via O_TMPFILE filesystem operations that leverage a duplicate cleanup operation.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-08-31  
Modified Date
2017-01-06  
Seq
2015-5706  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
141731 26786 CVE-2015-5706 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f15133df088ecadd141ea1907f2c96df67c729f0  View
141732 26786 CVE-2015-5706 http://twitter.com/grsecurity/statuses/597127122910490624  View
141733 26786 CVE-2015-5706 DSA-3329  View
141734 26786 CVE-2015-5706 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.4  View
141735 26786 CVE-2015-5706 [oss-security] 20150801 CVE request: Use-after-free in path lookup in Linux 3.11-4.0 inclusive  View
141736 26786 CVE-2015-5706 76142  View
141737 26786 CVE-2015-5706 USN-2680-1  View
141738 26786 CVE-2015-5706 USN-2681-1  View
141739 26786 CVE-2015-5706 https://bugzilla.redhat.com/show_bug.cgi?id=1250047  View
141740 26786 CVE-2015-5706 https://github.com/torvalds/linux/commit/f15133df088ecadd141ea1907f2c96df67c729f0  View
141741 26786 CVE-2015-5706 https://source.android.com/security/bulletin/2017-01-01.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9200 JVNDB-2015-004520 Linux Kernel の fs/namei.c の path_openat 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の fs/namei.c の path_openat 関数には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-5706 82931 CVE-2015-5706 26786 4.6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004520.html 2015-05-17 2015-09-01 View