CVE-2015-1805

The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun."

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.40% chance of exploitation in the next 30 days, 70th percentile

Published

2015-08-08

Updated

2024-08-06

Proof-of-concept exploits (5)

• FloatingGuy/cve-2015-18053★ · 2016-06-30
• dosomder/iovyroot276★ · 2017-11-23
• ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-18055★ · 2023-02-12
• panyu6325/CVE-2015-180531★ · 2016-04-20
• valentineus/hp-slate7-root-kit

References

• CVE Record
• NVD entry

Related

• CVE-2017-5123
• CVE-2015-1793
• CVE-2015-1815
• CVE-2015-1792
• CVE-2015-1830
• CVE-2015-1791