PT-2016-3611

CVE-2015-3288

·

Published

2014-01-23

·

Updated

2023-02-12

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.1.4
Description The issue concerns the mishandling of anonymous pages in the Linux kernel, allowing local users to gain privileges or cause a denial of service, specifically through page tainting, by using a crafted application that triggers writing to page zero.
Recommendations For Linux kernel versions prior to 4.1.4, update to version 4.1.4 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2015-3288
ALT-PU-2014-1079
ALT-PU-2014-1819
ALT-PU-2014-2297
ALT-PU-2015-1186
ALT-PU-2015-1673
ALT-PU-2015-1849
CESA-2015_2152
OPENSUSE-SU-2016_2144-1
RHSA-2015:2152
RHSA-2015_2152
SUSE-SU-2017:1301-1
SUSE-SU-2017:1613-1
SUSE-SU-2017_1613-1
SUSE-SU-2017:2342-1
USN-3127-1
USN-3127-2
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com