CVE-2015-7885: Infoleak
An information leak flaw was found in the dgncmgmtioctl() function of the Linux kernel.
Original report:
http://seclists.org/oss-sec/2015/q4/115
Upstream patch:
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/?id=4b6184336ebb5c8dc1eae7f7ab46ee608a748b05
Other sources
The dgncmgmtioctl function in drivers/staging/dgnc/dgncmgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2015-7885?
CVE-2015-7885 is a vulnerability in the Linux kernel that allows local users to obtain sensitive information from kernel memory via a crafted application.
How does the dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c trigger CVE-2015-7885?
The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c triggers CVE-2015-7885 by not initializing a certain structure member.
What is the severity of CVE-2015-7885?
CVE-2015-7885 has a low severity rating.
How can I fix CVE-2015-7885?
To fix CVE-2015-7885, you should update the Linux kernel to a version that includes the necessary patch.
Where can I find more information about CVE-2015-7885?
You can find more information about CVE-2015-7885 at the following references: [1] [2] [3].