CVEvulnerability

CVE-2015-1420

1.9 LOW Published 2015-03-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-03-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-362

Description

Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.

Affected configurations

• debian debian linux 7.0 • linux linux kernel (<= 3.18.9)

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References