CVE-2015-6646

2016-01-0600:00:00

ubuntu.com

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

20.4%

JSON

The System V IPC implementation in the kernel in Android before 6.0
2016-01-01 allows attackers to cause a denial of service (global kernel
resource consumption) by leveraging improper interaction between IPC
resource allocation and the memory manager, aka internal bug 22300191, a
different vulnerability than CVE-2015-7613.

Bugs

<https://launchpad.net/bugs/1532325>

Notes

Author	Note
mdeslaur	android-specific
jdstrand	android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support
sbeattie	android disabling IPC on their devices, ignoring