CVE-2015-8709: High severity linux kernel vulnerability
DISPUTED kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states "there is no kernel bug here."
Other sources
Linux kernel built with the User Namespaces(CONFIGUSERNS) support is vulnerable to a potential privilege escalation flaw. It could occur when a root owned process tries to enter a user namespace, wherein a user attempts to attach the entering process via ptrace(1).
A privileged name space user could use this flaw to potentially escalate their privileges on the system.
Upstream fix: ------------- -> https://lkml.org/lkml/2015/12/25/71
Reference: ---------- -> http://seclists.org/oss-sec/2015/q4/614
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
CVE-2015-8709.
What is the severity level of CVE-2015-8709?
The severity level of CVE-2015-8709 is high.
How does CVE-2015-8709 affect the Linux kernel?
CVE-2015-8709 allows local users to gain privileges by exploiting a mishandling of uid and gid mappings in the Linux kernel.
Which Linux kernel versions are affected by CVE-2015-8709?
Linux kernel versions through 4.4.1 are affected by CVE-2015-8709.
Is there a fix available for CVE-2015-8709?
Yes, the remedy is to upgrade to the specified versions: 3.13.0-103.150, 4.10~, 3.19.0-75.83, 4.2.0-22.27, 4.4.0-51.72, 4.8.0-28.30, and others.