CVE-2015-3339 in Linux Kernel

摘要 (英语)

Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped.

预定

2015-04-20

披露

2015-05-27

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
75137	Linux Kernel execve 竞争条件	362	未经证实	官方修复	CVE-2015-3339