CVE-2015-8709
Last modified
CVE-2015-8709 is a vulnerability of currently unknown severity. kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states "there is no kernel bug here.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.
Description
kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states "there is no kernel bug here.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | <= 4.4.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-8709?
How severe is CVE-2015-8709?
How do I fix CVE-2015-8709?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-8702The DNS::GetResult function in dns.cpp in InspIRCd before 2.…
- CVE-2015-8703ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE …
- CVE-2015-8704apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x …
- CVE-2015-8705buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when …
- CVE-2015-8707Password reset tokens in Magento CE before 1.9.2.2, and Mage…
- CVE-2015-8708Stack-based buffer overflow in the conv_euctojis function in…
- CVE-2015-8710The htmlParseComment function in HTMLparser.c in libxml2 all…9.8
- CVE-2015-8711epan/dissectors/packet-nbap.c in the NBAP dissector in Wires…
- CVE-2015-8712The dissect_hsdsch_channel_info function in epan/dissectors/…
- CVE-2015-8713epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in…
- CVE-2015-8714The dissect_dcom_OBJREF function in epan/dissectors/packet-d…
- CVE-2015-8715epan/dissectors/packet-alljoyn.c in the AllJoyn dissector in…
Are you affected by CVE-2015-8709?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST