CVE-2015-7312

Multiple race conditions in the Advanced Union Filesystem (aufs) aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service (use-after-free and BUG) or possibly gain privileges via a (1) madvise or (2) msync system call, related to mm/madvise.c and mm/msync.c.

• CWE-362
• CWE-416

• http://sourceforge.net/p/aufs/mailman/message/34449209/Exploit, Third Party Advisory
• http://www.debian.org/security/2015/dsa-3364Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/09/22/10Mailing List, Third Party Advisory
• http://www.ubuntu.com/usn/USN-2777-1Third Party Advisory
• http://sourceforge.net/p/aufs/mailman/message/34449209/Exploit, Third Party Advisory
• http://www.debian.org/security/2015/dsa-3364Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/09/22/10Mailing List, Third Party Advisory
• http://www.ubuntu.com/usn/USN-2777-1Third Party Advisory

Published

Nov 16, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7305The Scald module 7.x-1.x before 7.x-1.5 for Drupal does not …
• CVE-2015-7306The CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal doe…
• CVE-2015-7307Cross-site scripting (XSS) vulnerability in the CMS Updater …
• CVE-2015-7309The theme editor in Bolt before 2.2.5 does not check the fil…
• CVE-2015-7310McAfee Enterprise Security Manager (ESM), Enterprise Securit…
• CVE-2015-7311libxl in Xen 4.1.x through 4.6.x does not properly handle th…
• CVE-2015-7313LibTIFF before 4.0.7 allows remote attackers to cause a deni…5.5
• CVE-2015-7314The Precious module in gollum before 4.0.1 allows remote att…
• CVE-2015-7315Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 throu…
• CVE-2015-7316Cross-site scripting (XSS) vulnerability in Plone 3.3.0 thro…
• CVE-2015-7317Kupu 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 throug…
• CVE-2015-7318Plone 3.3.0 through 3.3.6 allows remote attackers to inject …