CVE-2015-6640

The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows attackers to gain privileges or cause a denial of service (vma list corruption) via a crafted application, aka internal bug 20017123.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*
cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2016-01-06 19:59

Updated : 2024-02-28 15:21


NVD link : CVE-2015-6640

Mitre link : CVE-2015-6640

CVE.ORG link : CVE-2015-6640


JSON object : View

Products Affected

google

  • android
CWE
CWE-264

Permissions, Privileges, and Access Controls