What is CVE-2015-7312?

CVE-2015-7312 is a vulnerability in Linux Kernel, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). Published 2015-11-16.

Is CVE-2015-7312 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Use After Free in Linux Kernel

CVE-2015-7312

Multiple race conditions in the Advanced Union Filesystem (aufs) aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service (use-after-free and BUG) or possibly gain privileges via a (1) madvise or (2) msync system call, related to mm/madvise.c and mm/msync.c.

Vulnerability class: Race Condition

EPSS: 0.004 (31.6th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel
Canonical Ubuntu_linux — versions 14.04
Debian Debian_linux — versions 8.0
N/a — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

thdusdl1219/CVE-Study

References

cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
cve@mitre.org (mailing-list, x_refsource_MLIST, Exploit, Third Party Advisory)
cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
cve@mitre.org (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)

Frequently asked questions

What is CVE-2015-7312?: CVE-2015-7312 is a vulnerability in Linux Kernel, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). Published 2015-11-16.
Is CVE-2015-7312 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.