Linux Distros Unpatched Vulnerability : CVE-2015-6640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The prctlsetvmaanonname function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a...

Linux 5.6 IORING_OP_MADVISE Race Condition

Linux 5.6: IORINGOPMADVISE races with coredumping Last year, I noticed that core dumping iterates over current-mm's VMA list without proper locking, under the assumption that the VMA list can not be modified externally. This assumption was broken by userfaultfd, which can trigger VMA merging...

CVE-2015-6640

The prctlsetvmaanonname function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows attackers to gain privileges or cause a denial of service vma list corruption via a crafted application,...

CVE-2015-6640

The prctlsetvmaanonname function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows attackers to gain privileges or cause a denial of service vma list corruption via a crafted application,...

CVE-2015-6640: Undefined Security Weakness

The prctlsetvmaanonname function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows attackers to gain privileges or cause a denial of service vma list corruption via a crafted application,...

PT-2016-1008

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY49F Android versions prior to 6.0 2016-01-01 Description The issue is related to the prctl vma anon name function in the Android kernel, which lacks a procedure to check the availability of virtual memory are...

CVE-2015-6640

The prctlsetvmaanonname function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows attackers to gain privileges or cause a denial of service vma list corruption via a crafted application,...