imPC@ndo IT

Tracker / CVE-2015-9004

CVE-2015-9004

High 7.8

kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted application, related to the perf_pmu_register and perf_event_open functions.

Affected products and versions

google android · … → 7.1.1
linux linux_kernel · … → 3.2.95
linux linux_kernel · 3.10.65 → 3.10.105
linux linux_kernel · 3.12 → 3.12.68
linux linux_kernel · 3.14.29 → 3.16.35
linux linux_kernel · 3.18.3 → 3.18.52

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References