CVE-2015-3288: Input Validation
First published: Fri May 06 2016(Updated: )
A security flaw was found in the Linux kernel that there is a way to arbitrary change zero page memory. Zero page is a page which kernel maps into virtual address space on read page fault if the page was not allocated before. Kernel has one zero page which used everywhere. Programs that map 0 page are affected and code execution can be gained. Upon running the exploit the system may become unusable as the linker memory pages gets tainted. Furthermore, if the right code is put in the 0 page, code execution is possible.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Linux Kernel | <3.2.71 | |
| Linux Kernel | >=3.4<3.4.111 | |
| Linux Kernel | >=3.10<3.10.86 | |
| Linux Kernel | >=3.12<3.12.47 | |
| Linux Kernel | >=3.14<3.14.50 | |
| Linux Kernel | >=3.16<3.16.35 | |
| Linux Kernel | >=3.18<3.18.52 | |
| Linux Kernel | >=4.1.0<4.1.4 | |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.129-1 6.1.128-1 6.12.21-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6b7339f4c31ad69c8e9c0b2859276e22cf72176d
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4
- http://www.securityfocus.com/bid/93591
- https://bugzilla.redhat.com/show_bug.cgi?id=1333830
- https://github.com/torvalds/linux/commit/6b7339f4c31ad69c8e9c0b2859276e22cf72176d
- https://security-tracker.debian.org/tracker/CVE-2015-3288
- https://source.android.com/security/bulletin/2017-01-01.html
- https://launchpad.net/bugs/cve/CVE-2015-3288
- https://access.redhat.com/support/policy/updates/errata/
- https://source.android.com/docs/security/bulletin/2017-01-01 (Advisory)
- https://git.kernel.org/linus/6b7339f4c31ad69c8e9c0b2859276e22cf72176d
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3288
- https://nvd.nist.gov/vuln/detail/CVE-2015-3288
- https://ubuntu.com/security/CVE-2015-3288
Frequently Asked Questions
What is CVE-2015-3288?
CVE-2015-3288 is a vulnerability in the Linux kernel that allows local users to gain privileges or cause a denial of service.
What is the severity of CVE-2015-3288?
CVE-2015-3288 has a severity rating of critical.
How does CVE-2015-3288 affect the Linux kernel?
CVE-2015-3288 affects the Linux kernel before version 4.1.4 and can be exploited by local users to gain privileges or cause a denial of service by triggering writing to page zero.
How can I fix CVE-2015-3288?
To fix CVE-2015-3288, upgrade your Linux kernel to version 4.2 or later.
Where can I find more information about CVE-2015-3288?
You can find more information about CVE-2015-3288 at the following references: [1] [2] [3]
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2015-3288
- agent/weakness
- agent/severity
- collector/mitre-cve
- source/MITRE
- collector/usn-cve
- source/Ubuntu
- agent/remedy
- agent/references
- agent/description
- agent/last-modified-date
- agent/trending
- agent/source
- agent/event
- agent/author
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/security-tracker-debian
- source/Debian
- collector/nvd-cve
- source/NVD
- collector/nvd-index
- vendor/google
- canonical/android
- package-manager/debian
- vendor/linux
- canonical/linux kernel
- version/linux kernel/3.4
- version/linux kernel/3.10
- version/linux kernel/3.12
- version/linux kernel/3.14
- version/linux kernel/3.16
- version/linux kernel/3.18
- version/linux kernel/4.1.0