CVE-2015-5697

Published: Aug 31, 2015Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The get_bitmap_file function in drivers/md/md.c in the Linux kernel before 4.1.6 does not initialize a certain bitmap data structure, which allows local users to obtain sensitive information from kernel memory via a GET_BITMAP_FILE ioctl call.

Affected (1)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 4.1.5

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (42)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b6878d9e03043695dbf3fa1caa6dfc09db225b16

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163661.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163711.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164137.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164193.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html

Source: cve@mitre.org

http://www.debian.org/security/2015/dsa-3329

Source: cve@mitre.org

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2015/07/28/2

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/76066

Source: cve@mitre.org

http://www.securitytracker.com/id/1033211

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2731-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2732-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2748-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2749-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2751-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2752-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2777-1

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=1249011

Source: cve@mitre.org

https://github.com/torvalds/linux/commit/b6878d9e03043695dbf3fa1caa6dfc09db225b16

Source: cve@mitre.org

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b6878d9e03043695dbf3fa1caa6dfc09db225b16