Launchpad.net

CVE 2015-8660

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.

Related bugs and status

CVE-2015-8660 (Candidate) is related to these bugs:

Bug #1486180: Kernel OOPS during DLPAR operation with Fibre Channel adapter

		In	Importance	Status
1486180	Kernel OOPS during DLPAR operation with Fibre Channel adapter	linux (Ubuntu)	Undecided	Fix Released
1486180	Kernel OOPS during DLPAR operation with Fibre Channel adapter	linux (Ubuntu Wily)	Undecided	Fix Released
1486180	Kernel OOPS during DLPAR operation with Fibre Channel adapter	linux (Ubuntu Xenial)	Undecided	Fix Released

Bug #1526811: SRU: walker list corruption while being intensively stressed

		In	Importance	Status
1526811	SRU: walker list corruption while being intensively stressed	linux (Ubuntu)	High	Fix Released
1526811	SRU: walker list corruption while being intensively stressed	linux (Ubuntu Xenial)	High	Fix Released
1526811	SRU: walker list corruption while being intensively stressed	linux (Ubuntu Wily)	Undecided	Fix Released
1526811	SRU: walker list corruption while being intensively stressed	Linux	Unknown	Unknown

Bug #1526946: Surelock GA2: Kernel panic with GA candidate driver, warning at kernel/rcu/tree.c:2694

		In	Importance	Status
1526946	Surelock GA2: Kernel panic with GA candidate driver, warning at kernel/rcu/tree.c:2694	linux (Ubuntu)	High	Fix Released
1526946	Surelock GA2: Kernel panic with GA candidate driver, warning at kernel/rcu/tree.c:2694	linux (Ubuntu Xenial)	High	Fix Released
1526946	Surelock GA2: Kernel panic with GA candidate driver, warning at kernel/rcu/tree.c:2694	linux (Ubuntu Wily)	Undecided	Fix Released

Bug #1527374: CVE-2015-8709

		In	Importance	Status
1527374	CVE-2015-8709	linux (Ubuntu)	Medium	Fix Released
1527374	CVE-2015-8709	linux (Ubuntu Wily)	Medium	Fix Released
1527374	CVE-2015-8709	linux (Ubuntu Trusty)	Medium	Fix Released
1527374	CVE-2015-8709	linux (Ubuntu Xenial)	Medium	Fix Released
1527374	CVE-2015-8709	linux (Ubuntu Vivid)	Medium	Fix Released
1527374	CVE-2015-8709	linux-lts-vivid (Ubuntu)	Undecided	Fix Released
1527374	CVE-2015-8709	linux-lts-wily (Ubuntu)	Undecided	Fix Released
1527374	CVE-2015-8709	linux-lts-utopic (Ubuntu)	Undecided	Fix Released
1527374	CVE-2015-8709	linux (Ubuntu Precise)	Medium	Invalid
1527374	CVE-2015-8709	linux-lts-trusty (Ubuntu Precise)	Medium	Fix Released
1527374	CVE-2015-8709	linux-armadaxp (Ubuntu)	Undecided	Confirmed
1527374	CVE-2015-8709	linux-goldfish (Ubuntu)	Undecided	Confirmed
1527374	CVE-2015-8709	linux-lts-saucy (Ubuntu)	Medium	Won't Fix
1527374	CVE-2015-8709	linux-lts-quantal (Ubuntu)	Medium	Won't Fix
1527374	CVE-2015-8709	linux-flo (Ubuntu)	Undecided	Confirmed
1527374	CVE-2015-8709	linux-raspi2 (Ubuntu)	Undecided	Fix Released
1527374	CVE-2015-8709	linux-mako (Ubuntu)	Undecided	Confirmed
1527374	CVE-2015-8709	linux-ti-omap4 (Ubuntu)	Undecided	Confirmed
1527374	CVE-2015-8709	linux-lts-raring (Ubuntu)	Medium	Won't Fix
1527374	CVE-2015-8709	linux-manta (Ubuntu)	Undecided	Confirmed
1527374	CVE-2015-8709	linux-lts-xenial (Ubuntu)	Undecided	New
1527374	CVE-2015-8709	linux-snapdragon (Ubuntu)	Undecided	New

Bug #1528904: CVE-2015-8660

		In	Importance	Status
1528904	CVE-2015-8660	linux (Ubuntu)	High	Fix Released
1528904	CVE-2015-8660	linux-lts-trusty (Ubuntu)	High	Invalid
1528904	CVE-2015-8660	linux-armadaxp (Ubuntu)	High	Invalid
1528904	CVE-2015-8660	linux-lts-wily (Ubuntu)	High	Invalid
1528904	CVE-2015-8660	linux-goldfish (Ubuntu)	High	New
1528904	CVE-2015-8660	linux-lts-saucy (Ubuntu)	High	Invalid
1528904	CVE-2015-8660	linux-lts-quantal (Ubuntu)	High	Invalid
1528904	CVE-2015-8660	linux-flo (Ubuntu)	High	New
1528904	CVE-2015-8660	linux-raspi2 (Ubuntu)	High	Fix Committed
1528904	CVE-2015-8660	linux-lts-vivid (Ubuntu)	High	Invalid
1528904	CVE-2015-8660	linux-mako (Ubuntu)	High	New
1528904	CVE-2015-8660	linux-lts-utopic (Ubuntu)	High	Invalid
1528904	CVE-2015-8660	linux-ti-omap4 (Ubuntu)	High	Invalid
1528904	CVE-2015-8660	linux-lts-raring (Ubuntu)	High	Invalid
1528904	CVE-2015-8660	linux-manta (Ubuntu)	High	Invalid
1528904	CVE-2015-8660	linux (Ubuntu Wily)	High	Fix Released
1528904	CVE-2015-8660	linux-armadaxp (Ubuntu Wily)	High	Invalid
1528904	CVE-2015-8660	linux-flo (Ubuntu Wily)	High	New
1528904	CVE-2015-8660	linux-goldfish (Ubuntu Wily)	High	New
1528904	CVE-2015-8660	linux-lts-quantal (Ubuntu Wily)	High	Invalid
1528904	CVE-2015-8660	linux-lts-raring (Ubuntu Wily)	High	Invalid
1528904	CVE-2015-8660	linux-lts-saucy (Ubuntu Wily)	High	Invalid
1528904	CVE-2015-8660	linux-lts-trusty (Ubuntu Wily)	High	Invalid
1528904	CVE-2015-8660	linux-lts-utopic (Ubuntu Wily)	High	Invalid
1528904	CVE-2015-8660	linux-lts-vivid (Ubuntu Wily)	High	Invalid
1528904	CVE-2015-8660	linux-lts-wily (Ubuntu Wily)	High	Invalid
1528904	CVE-2015-8660	linux-mako (Ubuntu Wily)	High	New
1528904	CVE-2015-8660	linux-manta (Ubuntu Wily)	High	New
1528904	CVE-2015-8660	linux-raspi2 (Ubuntu Wily)	High	Fix Released
1528904	CVE-2015-8660	linux-ti-omap4 (Ubuntu Wily)	High	Invalid
1528904	CVE-2015-8660	linux (Ubuntu Vivid)	High	Fix Released
1528904	CVE-2015-8660	linux-armadaxp (Ubuntu Vivid)	High	Invalid
1528904	CVE-2015-8660	linux-flo (Ubuntu Vivid)	High	Won't Fix
1528904	CVE-2015-8660	linux-goldfish (Ubuntu Vivid)	High	Won't Fix
1528904	CVE-2015-8660	linux-lts-quantal (Ubuntu Vivid)	High	Invalid
1528904	CVE-2015-8660	linux-lts-raring (Ubuntu Vivid)	High	Invalid
1528904	CVE-2015-8660	linux-lts-saucy (Ubuntu Vivid)	High	Invalid
1528904	CVE-2015-8660	linux-lts-trusty (Ubuntu Vivid)	High	Invalid
1528904	CVE-2015-8660	linux-lts-utopic (Ubuntu Vivid)	High	Invalid
1528904	CVE-2015-8660	linux-lts-vivid (Ubuntu Vivid)	High	Invalid
1528904	CVE-2015-8660	linux-lts-wily (Ubuntu Vivid)	High	Invalid
1528904	CVE-2015-8660	linux-mako (Ubuntu Vivid)	High	Won't Fix
1528904	CVE-2015-8660	linux-manta (Ubuntu Vivid)	High	Won't Fix
1528904	CVE-2015-8660	linux-raspi2 (Ubuntu Vivid)	High	Invalid
1528904	CVE-2015-8660	linux-ti-omap4 (Ubuntu Vivid)	High	Invalid
1528904	CVE-2015-8660	linux (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-armadaxp (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-flo (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-goldfish (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-lts-quantal (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-lts-raring (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-lts-saucy (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-lts-trusty (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-lts-utopic (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-lts-vivid (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-lts-wily (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-mako (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-manta (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-raspi2 (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux-ti-omap4 (Ubuntu Precise)	High	Invalid
1528904	CVE-2015-8660	linux (Ubuntu Trusty)	High	Invalid
1528904	CVE-2015-8660	linux-armadaxp (Ubuntu Trusty)	High	Invalid
1528904	CVE-2015-8660	linux-flo (Ubuntu Trusty)	High	Invalid
1528904	CVE-2015-8660	linux-goldfish (Ubuntu Trusty)	High	Invalid
1528904	CVE-2015-8660	linux-lts-quantal (Ubuntu Trusty)	High	Invalid
1528904	CVE-2015-8660	linux-lts-raring (Ubuntu Trusty)	High	Invalid
1528904	CVE-2015-8660	linux-lts-saucy (Ubuntu Trusty)	High	Invalid
1528904	CVE-2015-8660	linux-lts-trusty (Ubuntu Trusty)	High	Invalid
1528904	CVE-2015-8660	linux-lts-utopic (Ubuntu Trusty)	High	Invalid
1528904	CVE-2015-8660	linux-lts-vivid (Ubuntu Trusty)	High	Fix Released
1528904	CVE-2015-8660	linux-lts-wily (Ubuntu Trusty)	High	Fix Released
1528904	CVE-2015-8660	linux-mako (Ubuntu Trusty)	High	Invalid
1528904	CVE-2015-8660	linux-manta (Ubuntu Trusty)	High	Invalid
1528904	CVE-2015-8660	linux-raspi2 (Ubuntu Trusty)	High	Invalid
1528904	CVE-2015-8660	linux-ti-omap4 (Ubuntu Trusty)	High	Invalid

Bug #1529361: linux: 4.2.0-23.28 -proposed tracker

		In	Importance	Status
1529361	linux: 4.2.0-23.28 -proposed tracker	linux (Ubuntu)	Medium	Invalid
1529361	linux: 4.2.0-23.28 -proposed tracker	linux (Ubuntu Wily)	Medium	Fix Released
1529361	linux: 4.2.0-23.28 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1529361	linux: 4.2.0-23.28 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Fix Released
1529361	linux: 4.2.0-23.28 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1529361	linux: 4.2.0-23.28 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1529361	linux: 4.2.0-23.28 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1529361	linux: 4.2.0-23.28 -proposed tracker	Kernel SRU Workflow prepare-package-signed	Medium	Fix Released
1529361	linux: 4.2.0-23.28 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1529361	linux: 4.2.0-23.28 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1529361	linux: 4.2.0-23.28 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1529361	linux: 4.2.0-23.28 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1529361	linux: 4.2.0-23.28 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1529361	linux: 4.2.0-23.28 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

Bug #1529362: linux: 3.19.0-43.49 -proposed tracker

		In	Importance	Status
1529362	linux: 3.19.0-43.49 -proposed tracker	linux (Ubuntu)	Medium	Invalid
1529362	linux: 3.19.0-43.49 -proposed tracker	linux (Ubuntu Vivid)	Medium	Fix Released
1529362	linux: 3.19.0-43.49 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1529362	linux: 3.19.0-43.49 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Fix Released
1529362	linux: 3.19.0-43.49 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1529362	linux: 3.19.0-43.49 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1529362	linux: 3.19.0-43.49 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1529362	linux: 3.19.0-43.49 -proposed tracker	Kernel SRU Workflow prepare-package-signed	Medium	Fix Released
1529362	linux: 3.19.0-43.49 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1529362	linux: 3.19.0-43.49 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1529362	linux: 3.19.0-43.49 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1529362	linux: 3.19.0-43.49 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1529362	linux: 3.19.0-43.49 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1529362	linux: 3.19.0-43.49 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

Bug #1529971: linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker

		In	Importance	Status
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	linux-lts-vivid (Ubuntu)	Medium	Invalid
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	linux-lts-vivid (Ubuntu Trusty)	Medium	Fix Released
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Fix Released
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	Kernel SRU Workflow prepare-package-signed	Medium	Fix Released
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1529971	linux-lts-vivid: 3.19.0-43.49~14.04.1 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

Bug #1529992: linux-raspi2: 4.2.0-1018.25 -proposed tracker

		In	Importance	Status
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	linux-raspi2 (Ubuntu)	Undecided	Invalid
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	linux-raspi2 (Ubuntu Wily)	Undecided	Fix Released
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Fix Released
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	Kernel SRU Workflow upload-to-ppa	Medium	Fix Released
1529992	linux-raspi2: 4.2.0-1018.25 -proposed tracker	Kernel SRU Workflow verification-testing	Undecided	Fix Released

Bug #1529993: linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker

		In	Importance	Status
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	linux-lts-wily (Ubuntu)	Medium	Invalid
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	linux-lts-wily (Ubuntu Trusty)	Medium	Fix Released
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Fix Released
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	Kernel SRU Workflow prepare-package-signed	Medium	Fix Released
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1529993	linux-lts-wily: 4.2.0-23.28~14.04.1 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

Bug #1532886: s390x kernels are inconsistent for cloud stuff

Summary				In	Importance	Status
	1532886	s390x kernels are inconsistent for cloud stuff		linux (Ubuntu)	Medium	Fix Released
	1532886	s390x kernels are inconsistent for cloud stuff		linux (Ubuntu Xenial)	Medium	Fix Released

Bug #1532958: linux: 4.3.0-6.17 -proposed tracker

		In	Importance	Status
1532958	linux: 4.3.0-6.17 -proposed tracker	linux (Ubuntu)	Medium	Fix Released
1532958	linux: 4.3.0-6.17 -proposed tracker	linux (Ubuntu Xenial)	Medium	Fix Released
1532958	linux: 4.3.0-6.17 -proposed tracker	Kernel Development Workflow	Medium	Fix Released
1532958	linux: 4.3.0-6.17 -proposed tracker	Kernel Development Workflow automated-testing	Medium	Fix Released
1532958	linux: 4.3.0-6.17 -proposed tracker	Kernel Development Workflow prepare-package	Medium	Fix Released
1532958	linux: 4.3.0-6.17 -proposed tracker	Kernel Development Workflow prepare-package-meta	Medium	Fix Released
1532958	linux: 4.3.0-6.17 -proposed tracker	Kernel Development Workflow prepare-package-signed	Medium	Fix Released
1532958	linux: 4.3.0-6.17 -proposed tracker	Kernel Development Workflow promote-to-proposed	Medium	Fix Released
1532958	linux: 4.3.0-6.17 -proposed tracker	Kernel Development Workflow promote-to-release	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2015-8660

Related bugs and status

Related bugs

References