CVE-2015-4170

Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and ldsem_down_write deadlock) by establishing a new tty thread during shutdown of a previous tty thread.

• CWE-362

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203aeVendor Advisory
• http://www.openwall.com/lists/oss-security/2015/05/26/1
• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
• http://www.securityfocus.com/bid/74820
• https://access.redhat.com/errata/RHSA-2016:1395Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1218879Issue Tracking, VDB Entry
• https://github.com/torvalds/linux/commit/cf872776fc84128bb779ce2b83a37c884c3203ae
• https://www.kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xzPatch
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203aeVendor Advisory
• http://www.openwall.com/lists/oss-security/2015/05/26/1
• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
• http://www.securityfocus.com/bid/74820
• https://access.redhat.com/errata/RHSA-2016:1395Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1218879Issue Tracking, VDB Entry
• https://github.com/torvalds/linux/commit/cf872776fc84128bb779ce2b83a37c884c3203ae
• https://www.kernel.org/pub/linux/kernel/next/patch-v3.13-rc4-next-20131218.xzPatch

Published

May 2, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4163GNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not chec…
• CVE-2015-4164The compat_iret function in Xen 3.1 through 4.5 iterates the…
• CVE-2015-4165The snapshot API in Elasticsearch before 1.6.0 when another …
• CVE-2015-4166Cloudera Key Trustee Server before 5.4.3 does not store keys…
• CVE-2015-4167The udf_read_inode function in fs/udf/inode.c in the Linux k…
• CVE-2015-4169Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-4171strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN…
• CVE-2015-4173Unquoted Windows search path vulnerability in the autorun va…
• CVE-2015-4174Cross-site scripting (XSS) vulnerability in the integrated w…
• CVE-2015-4176fs/namespace.c in the Linux kernel before 4.0.2 does not pro…
• CVE-2015-4177The collect_mounts function in fs/namespace.c in the Linux k…
• CVE-2015-4178The fs_pin implementation in the Linux kernel before 4.0.5 d…