CVE-2015-6646

2016-01-0600:00:00

ubuntu.com

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

21.7%

JSON

The System V IPC implementation in the kernel in Android before 6.0
2016-01-01 allows attackers to cause a denial of service (global kernel
resource consumption) by leveraging improper interaction between IPC
resource allocation and the memory manager, aka internal bug 22300191, a
different vulnerability than CVE-2015-7613.

Bugs

<https://launchpad.net/bugs/1532325>

Notes

Author	Note
mdeslaur	android-specific
jdstrand	android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support
sbeattie	android disabling IPC on their devices, ignoring