VULNERABILITY INTELLIGENCE

CVE-2015-1420

CVSS score1.9 LOW
EPSS probability0.36%
CISA KEVNot currently listed
Published2015-03-16
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:P/I:N/A:N

Description

Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references