NetSight
IP …
medium6.9

CVE-2015-7613

Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that le…

Impact

Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.72
from 3.3 before 3.4.111
from 3.5 before 3.10.91
from 3.11 before 3.12.50
from 3.13 before 3.14.55
from 3.15 before 3.16.35

Weakness classification

CWE-362

References