Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped.
References
Configurations
History
07 Nov 2023, 02:25
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2015-05-27 10:59
Updated : 2024-02-28 15:21
NVD link : CVE-2015-3339
Mitre link : CVE-2015-3339
CVE.ORG link : CVE-2015-3339
JSON object : View
Products Affected
linux
- linux_kernel
debian
- debian_linux
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')