CVE-2015-4170

2016-05-0200:00:00

ubuntu.com

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

42.1%

JSON

Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in
the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause
a denial of service (ldsem_down_read and ldsem_down_write deadlock) by
establishing a new tty thread during shutdown of a previous tty thread.

Bugs

Notes

Author	Note
jdstrand	android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support