CVE-2015-3339
Beschrijving
Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped.
Vendors
Affected products
References
- git.kernel.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- rhn.redhat.com
- www.debian.org
- www.kernel.org
- www.openwall.com
- www.oracle.com
- www.oracle.com
- www.securitytracker.com
- bugzilla.redhat.com
- github.com