CVE-2015-1805
HIGH 7.2EPSS 1.4%
The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun."
- CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 1.41% chance of exploitation in the next 30 days, 72nd percentile
- Published
- 2015-08-08
- Updated
- 2024-08-06
Proof-of-concept exploits (5)
- FloatingGuy/cve-2015-18053★ · 2016-06-30
- dosomder/iovyroot275★ · 2017-11-23
- ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-18056★ · 2023-02-12
- panyu6325/CVE-2015-180531★ · 2016-04-20
- valentineus/hp-slate7-root-kit1★ · 2026-08-18
Security advisories
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/74951
- http://www.ubuntu.com/usn/USN-2679-1
- http://www.ubuntu.com/usn/USN-2680-1
- http://www.ubuntu.com/usn/USN-2681-1
- http://www.ubuntu.com/usn/USN-2967-1
- http://www.ubuntu.com/usn/USN-2967-2