NetSight
low1.9

CVE-2015-2830

arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users …

Impact

arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 7.0, 8.0
LinuxLinux Kernel
through 3.19.1
CanonicalUbuntu Linux
Version 12.04

Weakness classification

References