CVE-2015-2041: Medium severity suse linux enterprise server vulnerability
A flaw was found in the method that the linux kernel handles userspace configuration of of the the Linux kernel's logical link control (LLC) implementation system settings. The incorrect handling allowed a trusted user to set multiple LLC syscalls with specially formatted data. Reading from these files also returned data from other sysctl settings that would be exposed via the same permissions to this user.
This bug provides little risk to users as the values that can be modified are exposed via proc sysctls with the same permissions.
Upstream patch:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6b8d9117ccb4f81b1244aafa7bc70ef8fa45fc49
Other sources
net/llc/sysctlnetllc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2041?
CVE-2015-2041 has been classified as medium severity due to its potential for user privilege escalation.
How do I fix CVE-2015-2041?
To fix CVE-2015-2041, upgrade the Linux kernel to a version that includes the security patch.
Which versions of Linux are affected by CVE-2015-2041?
CVE-2015-2041 affects various Linux kernel versions up to 3.18.7 and multiple specific Debian and SUSE versions.
Can CVE-2015-2041 be exploited locally?
Yes, CVE-2015-2041 can be exploited by a trusted local user to gain elevated privileges.
What are the risks associated with CVE-2015-2041?
The risks of CVE-2015-2041 include potential unauthorized access and modifications to system settings by a lower-privileged user.