// For flags

CVE-2015-7613

kernel: Unauthorized access to IPC objects with SysV shm

Severity Score

6.9
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c.

Condición de carrera en la implementación del objeto IPC en el kernel de Linux hasta la versión 4.2.3 permite a usuarios locales obtener privilegios desencadenando una llamada a ipc_addid que conduce a comparaciones de uid y gid contra datos no inicializados, relacionada con msg.c, shm.c y util.c.

A race condition flaw was found in the way the Linux kernel's IPC subsystem initialized certain fields in an IPC object structure that were later used for permission checking before inserting the object into a globally visible list. A local, unprivileged user could potentially use this flaw to elevate their privileges on the system.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
Attack Vector
Local
Attack Complexity
High
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2015-10-01 CVE Reserved
  • 2015-10-06 CVE Published
  • 2024-08-06 CVE Updated
  • 2024-08-06 First Exploit
  • 2024-12-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
  • CWE-732: Incorrect Permission Assignment for Critical Resource
CAPEC
References (27)
URL Tag Source
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a532277938798b53178d5a66af6e2915cb27cf X_refsource_confirm
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html X_refsource_confirm
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html X_refsource_confirm
http://www.securityfocus.com/bid/76977 Vdb Entry
http://www.securitytracker.com/id/1034094 Vdb Entry
http://www.securitytracker.com/id/1034592 Vdb Entry
https://github.com/torvalds/linux/commit/b9a532277938798b53178d5a66af6e2915cb27cf X_refsource_confirm
https://kc.mcafee.com/corporate/index?page=content&id=SB10146 X_refsource_confirm
URL Date SRC
http://www.openwall.com/lists/oss-security/2015/10/01/8 2024-08-06
URL Date SRC
URL Date SRC
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html 2016-12-08
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html 2016-12-08
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html 2016-12-08
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html 2016-12-08
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html 2016-12-08
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html 2016-12-08
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html 2016-12-08
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html 2016-12-08
http://rhn.redhat.com/errata/RHSA-2015-2636.html 2016-12-08
http://www.debian.org/security/2015/dsa-3372 2016-12-08
http://www.ubuntu.com/usn/USN-2761-1 2016-12-08
http://www.ubuntu.com/usn/USN-2762-1 2016-12-08
http://www.ubuntu.com/usn/USN-2763-1 2016-12-08
http://www.ubuntu.com/usn/USN-2764-1 2016-12-08
http://www.ubuntu.com/usn/USN-2765-1 2016-12-08
http://www.ubuntu.com/usn/USN-2792-1 2016-12-08
https://bugzilla.redhat.com/show_bug.cgi?id=1268270 2015-12-15
https://access.redhat.com/security/cve/CVE-2015-7613 2015-12-15
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 <= 4.2.3
Search vendor "Linux" for product "Linux Kernel" and version " <= 4.2.3"
-
Affected