Linux Kernel I/O Vector Vulnerability in Pipe Implementations by Red Hat
CVE-2015-1805

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
8 August 2015

Badges

๐Ÿ‘พ Exploit Exists๐ŸŸก Public PoC

What is CVE-2015-1805?

The Linux kernel prior to version 3.16 contains vulnerabilities within the pipe_read and pipe_write functions that improperly handle failures in memory copy operations. This oversight may result in a denial of service by causing system crashes or may potentially allow attackers to exploit the vulnerability for privilege escalation using maliciously crafted applications.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

References

Timeline

  • ๐ŸŸก

    Public PoC available

  • ๐Ÿ‘พ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.