Linux kernel Privilege Escalation Vulnerability (CVE-2015-7613)

Linux kernel Privilege Escalation Vulnerability (CVE-2015-7613)
Linux kernel Privilege Escalation Vulnerability (CVE-2015-7613)

Release date:
Updated on:

Affected Systems:

Linux kernel 〈 4.2.3

Description:

CVE (CAN) ID: CVE-2015-7613

Linux Kernel is the Kernel of the Linux operating system.

In Linux kernel 4.2.3 and earlier versions, the IPC object implementation has a race condition security vulnerability. Local Users trigger ipc_addid calls to compare uninitialized data with uid and gid, resulting in permission escalation.

<* Source: Adam Mari & #353;
*>

Suggestion:

Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://bugzilla.redhat.com/show_bug.cgi? Id = 1268270
Https://github.com/torvalds/linux/commit/b9a532277938798b53178d5a66af6e2915cb27cf
Http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit? Id = b9a532277938798b53178d5a66af6e2915cb27cf

Linux Kernel 4.2.2 compilation and installation tutorial

Ubuntu 15.10 will use the Linux Kernel 4.2 Kernel

How to install Kernel 4.0.2 on CentOS 7

How to install Linux Kernel 4.0 on CentOS 7

How to install Linux kernel 4.0 on Ubuntu/CentOS?

How to install Linux kernel 13.10 On Ubuntu 3.12

How to install the 3.16.7 CKT2 kernel in Ubuntu 14.10, Ubuntu 14.04, and its derivative versions

Linux Kernel: click here
Linux Kernel: click here

This article permanently updates the link address: