CVE-2015-5706: Use After Free
A flaw was found in the Linux kernels function pathopenat() in which would incorrectly clear up twice (as part of pathlookupat() called by dotmpfile(). Doing so again can lead to double fput(). This can lead to a use-after free condition.
CVE assignment: http://seclists.org/oss-sec/2015/q3/270
Introduced in this commit: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bb458c644a59dbba3a1fe59b27106c5e68e1c4bd
Upstream patch: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f15133df088ecadd141ea1907f2c96df67c729f0
OSS-SEC request: http://seclists.org/oss-sec/2015/q3/371
Other sources
Use-after-free vulnerability in the pathopenat function in fs/namei.c in the Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a denial of service or possibly have unspecified other impact via OTMPFILE filesystem operations that leverage a duplicate cleanup operation.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5706?
CVE-2015-5706 is classified as a moderate severity vulnerability due to its potential to cause a use-after-free condition.
What systems are affected by CVE-2015-5706?
CVE-2015-5706 affects certain versions of the Linux kernel and specific distributions of Android and Ubuntu.
How can I fix CVE-2015-5706?
To fix CVE-2015-5706, update the Linux kernel to version 5.10.223-1 or later, or apply the relevant patches for affected distributions.
What type of vulnerability is CVE-2015-5706?
CVE-2015-5706 is a use-after-free vulnerability that arises from improper memory management in the Linux kernel.
What impacts could result from exploiting CVE-2015-5706?
Exploiting CVE-2015-5706 could lead to local privilege escalation and potentially allow an attacker to execute arbitrary code.