CVE-2015-4170

Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and ldsem_down_write deadlock) by establishing a new tty thread during shutdown of a previous tty thread.
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.1:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.1_s390x:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.1_ppc64:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.1_ppc64le:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*

History

21 Nov 2024, 02:30

Type Values Removed Values Added
References () http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203ae - Vendor Advisory () http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203ae - Vendor Advisory
References () http://www.openwall.com/lists/oss-security/2015/05/26/1 - () http://www.openwall.com/lists/oss-security/2015/05/26/1 -
References () http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - () http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html -
References () http://www.securityfocus.com/bid/74820 - () http://www.securityfocus.com/bid/74820 -
References () https://access.redhat.com/errata/RHSA-2016:1395 - Third Party Advisory () https://access.redhat.com/errata/RHSA-2016:1395 - Third Party Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=1218879 - Issue Tracking, VDB Entry () https://bugzilla.redhat.com/show_bug.cgi?id=1218879 - Issue Tracking, VDB Entry
References () https://github.com/torvalds/linux/commit/cf872776fc84128bb779ce2b83a37c884c3203ae - () https://github.com/torvalds/linux/commit/cf872776fc84128bb779ce2b83a37c884c3203ae -
References () https://www.kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xz - Patch () https://www.kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xz - Patch

Information

Published : 2016-05-02 10:59

Updated : 2024-11-21 02:30


NVD link : CVE-2015-4170

Mitre link : CVE-2015-4170

CVE.ORG link : CVE-2015-4170


JSON object : View

Products Affected

redhat

  • enterprise_linux_for_ibm_z_systems_eus
  • enterprise_linux_for_power_big_endian_eus
  • enterprise_linux_server_eus
  • enterprise_linux_for_power_little_endian_eus
  • enterprise_linux_compute_node_eus

linux

  • linux_kernel
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')