CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS
Percentile
10.1%
net/llc/sysctl_net_llc.c in the Linux kernel before 3.19 uses an incorrect
data type in a sysctl table, which allows local users to obtain potentially
sensitive information from kernel memory or possibly have unspecified other
impact by accessing a sysctl entry.
Author | Note |
---|---|
jdstrand | android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support |
sbeattie | introduced in https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=590232a7150674b2036291eaefce085f3f9659c8 |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 12.04 | noarch | linux | <Â 3.2.0-80.116 | UNKNOWN |
ubuntu | 14.04 | noarch | linux | <Â 3.13.0-49.81 | UNKNOWN |
ubuntu | 14.10 | noarch | linux | <Â 3.16.0-34.45 | UNKNOWN |
ubuntu | 12.04 | noarch | linux-armadaxp | <Â 3.2.0-1648.67 | UNKNOWN |
ubuntu | 12.04 | noarch | linux-lts-trusty | <Â 3.13.0-49.81~precise1 | UNKNOWN |
ubuntu | 14.04 | noarch | linux-lts-utopic | <Â 3.16.0-34.45~14.04.1 | UNKNOWN |
ubuntu | 12.04 | noarch | linux-ti-omap4 | <Â 3.2.0-1462.82 | UNKNOWN |
launchpad.net/bugs/cve/CVE-2015-2041
nvd.nist.gov/vuln/detail/CVE-2015-2041
security-tracker.debian.org/tracker/CVE-2015-2041
ubuntu.com/security/notices/USN-2560-1
ubuntu.com/security/notices/USN-2561-1
ubuntu.com/security/notices/USN-2562-1
ubuntu.com/security/notices/USN-2563-1
ubuntu.com/security/notices/USN-2564-1
ubuntu.com/security/notices/USN-2565-1
www.cve.org/CVERecord?id=CVE-2015-2041