VULNERABILITY INTELLIGENCE

CVE-2015-3339

CVSS score6.2 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2015-05-27
Last modified2026-06-17
CVSS vectorAV:L/AC:H/Au:N/C:C/I:C/A:C

Description

Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references