CVE-2015-7613 | Mend Vulnerability Database

Vulnerability DatabaseCVE-2015-7613

CVE-2015-7613

Published:October 19, 2015

Updated:May 17, 2026

Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c.

Related Resources (28)

https://kc.mcafee.com/corporate/index?page=content&id=SB10146

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html

http://www.ubuntu.com/usn/USN-2765-1

https://github.com/torvalds/linux/commit/b9a532277938798b53178d5a66af6e2915cb27cf

https://bugzilla.redhat.com/show_bug.cgi?id=1268270

http://www.ubuntu.com/usn/USN-2764-1

http://www.ubuntu.com/usn/USN-2792-1

http://www.securitytracker.com/id/1034094

https://people.canonical.com/~ubuntu-security/cve/CVE-2015-7613

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

https://access.redhat.com/security/cve/CVE-2015-7613

http://www.securitytracker.com/id/1034592

http://rhn.redhat.com/errata/RHSA-2015-2636.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://www.debian.org/security/2015/dsa-3372

http://www.openwall.com/lists/oss-security/2015/10/01/8

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html

http://www.ubuntu.com/usn/USN-2761-1

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html

http://www.securityfocus.com/bid/76977

http://www.ubuntu.com/usn/USN-2762-1

http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html

http://www.ubuntu.com/usn/USN-2763-1

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a532277938798b53178d5a66af6e2915cb27cf

Do you need more information?

CVSS v3

Base Score:

7.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

CVSS v2

Base Score:

6.9

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

Weakness Type (CWE)

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS

Base Score:

0.08