#VU92476 Improper privilege management in Linux kernel - CVE-2015-8539
Vulnerability identifier: #VU92476
Vulnerability risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID:
CWE-ID:
CWE-269
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to execute arbitrary code.
The vulnerability exists due to improper privilege management error within the user_update() function in security/keys/user_defined.c, within the trusted_rcu_free() function in security/keys/trusted.c, within the encrypted_update() function in security/keys/encrypted-keys/encrypted.c. A local user can execute arbitrary code.
Mitigation
Install update from vendor's repository.
Vulnerable software versions
Linux kernel: All versions
External links
https://www.openwall.com/lists/oss-security/2015/12/09/1
https://github.com/torvalds/linux/commit/096fe9eaea40a17e125569f9e657e34cdb6d73bd
https://bugzilla.redhat.com/show_bug.cgi?id=1284450
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=096fe9eaea40a17e125569f9e657e34cdb6d73bd
https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html
https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html
https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html
https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html
https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html
https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00008.html
https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html
https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00011.html
https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html
https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html
https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html
https://access.redhat.com/errata/RHSA-2018:0181
https://access.redhat.com/errata/RHSA-2018:0152
https://access.redhat.com/errata/RHSA-2018:0151
https://usn.ubuntu.com/3798-2/
https://usn.ubuntu.com/3798-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
