CVE-2015-3339
- State
- Published
- Severity
- Not scored
- Published
- May 27, 2015
- Updated
- Aug 6, 2024
- Reserved
- Apr 20, 2015
Description
Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- SUSE-SU-2015:1491vendor-advisory
- 1032412vdb-entry
- SUSE-SU-2015:1489vendor-advisory
- SUSE-SU-2015:1488vendor-advisory
- FEDORA-2015-8518vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1214030
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- DSA-3237vendor-advisory
- FEDORA-2015-7736vendor-advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- openSUSE-SU-2015:1382vendor-advisory
- [oss-security] 20150420 Re: Linux: chown() was racy relative to execve() - Linux kernelmailing-list
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.6
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8b01fc86b9f425899f8a3a8fc1c47d73c2c20543
- SUSE-SU-2016:2074vendor-advisory
- RHSA-2015:1272vendor-advisory
- SUSE-SU-2015:1487vendor-advisory
- https://github.com/torvalds/linux/commit/8b01fc86b9f425899f8a3a8fc1c47d73c2c20543
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.