Lucene search

K
f5F5F5:K90230486
HistoryDec 03, 2015 - 12:00 a.m.

K90230486 : Linux kernel vulnerability CVE-2015-7613

2015-12-0300:00:00
my.f5.com
12

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

Security Advisory Description

Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c. (CVE-2015-7613)
Impact
Exploitation of this issue requires shell access, and a non-standard and unsupported configuration (such as modifications to Linux configuration files) may expose this issue further. F5 does not recommend manually editing Linux configuration files. There is no remote access vector or data plane exposure.