CVE-2015-7799: Null Pointer Dereference
Last updated 24 July 2024
Other sources
The following flaw was found in the Linux kernel:
In the process of using the PPP device driver, if the unit of the PPP device file has been created. On the basis of the above, the ioctl function is used to pass the PPPIOCSMAXCID command and the 0x67084000 parameter (parameters must be satisfied: arg>>16 > 255 and 0xFFFF&arg > 255), which will lead to the use of null pointers in the kernel.
References:
https://code.google.com/p/android/issues/detail?id=187973 http://seclists.org/oss-sec/2015/q4/53 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/drivers/net/slip/slhc.c?id=4ab42d78e37a294ac7bc56901d563c642e03c4ae
— Red Hat
The slhcinit function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2015-7799.
What is the severity of CVE-2015-7799?
The severity of CVE-2015-7799 is low.
What is the description of CVE-2015-7799?
CVE-2015-7799 is a vulnerability in the slhc_init function in the Linux kernel through 4.2.3 that allows local users to cause a denial of service.
Which software versions are affected by CVE-2015-7799?
The affected software versions include Ubuntu Linux 4.4~, 3.2.0-98.138, 3.13.0-73.116, 3.19.0-41.46, and 4.2.0-21.25, among others.
Where can I find more information about CVE-2015-7799?
You can find more information about CVE-2015-7799 at the following references: [http://www.openwall.com/lists/oss-security/2015/10/10/3] [https://code.google.com/p/android/issues/detail?id=187973] [https://bugzilla.redhat.com/show_bug.cgi?id=1271134].