Security restrictions bypass in Linux kernel - CVE-2015-3290

Vulnerability identifier: #VU92492

CSH Severity: Low

CVSS v4 BT: 7.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2015-3290

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: Public exploit is available

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to security restrictions bypass within the entry() function in arch/x86/entry/entry_64.s. A local user can execute arbitrary code.

Linux kernel
Fedora
openEuler
kernel
kernel-debuginfo
python3-perf-debuginfo
python3-perf
perf-debuginfo
perf
kernel-tools-devel
kernel-tools
kernel-debugsource
kernel-devel
kernel-source
kernel-tools-debuginfo
kernel-headers
bpftool
bpftool-debuginfo

Install update from vendor's repository.

kernel - update to 4.1.3-201.fc22
kernel-debuginfo - addressed in versions 5.10.0-136.97.0.178, 5.10.0-232.0.0.134, 6.6.0-75.0.0.68
python3-perf-debuginfo - addressed in versions 5.10.0-136.97.0.178, 5.10.0-232.0.0.134, 6.6.0-75.0.0.68
python3-perf - addressed in versions 5.10.0-136.97.0.178, 5.10.0-232.0.0.134, 6.6.0-75.0.0.68
perf-debuginfo - addressed in versions 5.10.0-136.97.0.178, 5.10.0-232.0.0.134, 6.6.0-75.0.0.68
perf - addressed in versions 5.10.0-136.97.0.178, 5.10.0-232.0.0.134, 6.6.0-75.0.0.68
kernel-tools-devel - addressed in versions 5.10.0-136.97.0.178, 5.10.0-232.0.0.134, 6.6.0-75.0.0.68
kernel-tools - addressed in versions 5.10.0-136.97.0.178, 5.10.0-232.0.0.134, 6.6.0-75.0.0.68
kernel - addressed in versions 5.10.0-136.97.0.178, 5.10.0-232.0.0.134, 6.6.0-75.0.0.68
kernel-debugsource - addressed in versions 5.10.0-136.97.0.178, 5.10.0-232.0.0.134, 6.6.0-75.0.0.68
kernel-devel - addressed in versions 5.10.0-136.97.0.178, 5.10.0-232.0.0.134, 6.6.0-75.0.0.68
kernel-source - addressed in versions 5.10.0-136.97.0.178, 5.10.0-232.0.0.134, 6.6.0-75.0.0.68
kernel-tools-debuginfo - addressed in versions 5.10.0-136.97.0.178, 5.10.0-232.0.0.134, 6.6.0-75.0.0.68
kernel-headers - addressed in versions 5.10.0-136.97.0.178, 5.10.0-232.0.0.134, 6.6.0-75.0.0.68
bpftool - update to 6.6.0-75.0.0.68
bpftool-debuginfo - update to 6.6.0-75.0.0.68

• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6
• http://www.openwall.com/lists/oss-security/2015/08/04/8
• https://github.com/torvalds/linux/commit/9b6e6a8334d56354853f9c255d1395c2ba570e0a
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b6e6a8334d56354853f9c255d1395c2ba570e0a
• https://bugzilla.redhat.com/show_bug.cgi?id=1243465
• http://www.openwall.com/lists/oss-security/2015/07/22/7
• http://www.securityfocus.com/bid/76004
• http://www.ubuntu.com/usn/USN-2691-1
• http://www.ubuntu.com/usn/USN-2690-1
• http://www.ubuntu.com/usn/USN-2689-1
• http://www.ubuntu.com/usn/USN-2688-1
• http://www.ubuntu.com/usn/USN-2687-1
• http://www.debian.org/security/2015/dsa-3313
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html
• https://www.exploit-db.com/exploits/37722/

• Security restrictions bypass in Linux kernel x86 entry
• openEuler 22.03 LTS SP1 update for kernel
• openEuler 22.03 LTS SP3 update for kernel
• openEuler 24.03 LTS update for kernel
• Fedora 22 update for kernel