CVE-2015-7885

Published: Dec 28, 2015Modified: May 6, 2026

2.3

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Exploitability: 0.8 / Impact: 1.4

Source: NVD

Description

The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application.

Affected (1)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 4.3.2

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (28)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4b6184336ebb5c8dc1eae7f7ab46ee608a748b05

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2015/10/21/8

Source: cve@mitre.org

http://www.securityfocus.com/bid/77317

Source: cve@mitre.org

http://www.securitytracker.com/id/1034896

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2841-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2841-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2842-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2842-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2843-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2843-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2843-3

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2844-1

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=1274728

Source: cve@mitre.org

https://github.com/torvalds/linux/commit/4b6184336ebb5c8dc1eae7f7ab46ee608a748b05

Source: cve@mitre.org

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4b6184336ebb5c8dc1eae7f7ab46ee608a748b05