Summary
Dmitry Vyukov discovered that the Linux kernel did not properly initialize
IPC object state in certain situations. A local attacker could use this to
escalate their privileges, expose confidential information, or cause a
denial of service (system crash).
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | linux-lts-vivid | 3.19.0-30.34~14.04.1 |
Vulnerabilities 1
-
Unscored —
Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges…
References
-
report
https://ubuntu.com/security/CVE-2015-7613