cve/2015/CVE-2015-1805.md

CVE-2015-1805

Description

The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun."

POC

Reference

• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/CVEDB/PoC-List
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CVEDB/top
• https://github.com/FloatingGuy/cve-2015-1805
• https://github.com/GhostTroops/TOP
• https://github.com/JERRY123S/all-poc
• https://github.com/JyotsnaSharma598/cybersecurity_case_studies
• https://github.com/R0B1NL1N/linux-kernel-exploitation
• https://github.com/Technoashofficial/kernel-exploitation-linux
• https://github.com/cyberanand1337x/bug-bounty-2022
• https://github.com/dosomder/iovyroot
• https://github.com/hktalent/TOP
• https://github.com/hoangcuongflp/MobileSecurity2016-recap
• https://github.com/idhyt/androotzf
• https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805
• https://github.com/jbmihoub/all-poc
• https://github.com/jpacg/awesome-stars
• https://github.com/kdn111/linux-kernel-exploitation
• https://github.com/khanhdn111/linux-kernel-exploitation
• https://github.com/khanhdz-06/linux-kernel-exploitation
• https://github.com/khanhdz191/linux-kernel-exploitation
• https://github.com/khanhhdz/linux-kernel-exploitation
• https://github.com/khanhhdz06/linux-kernel-exploitation
• https://github.com/khanhnd123/linux-kernel-exploitation
• https://github.com/knd06/linux-kernel-exploitation
• https://github.com/makaitoushi/iovyroot_kyv37
• https://github.com/mobilelinux/iovy_root_research
• https://github.com/ndk06/linux-kernel-exploitation
• https://github.com/ndk191/linux-kernel-exploitation
• https://github.com/panyu6325/CVE-2015-1805
• https://github.com/skbasava/Linux-Kernel-exploit
• https://github.com/snorez/exploits
• https://github.com/ssr-111/linux-kernel-exploitation
• https://github.com/tangsilian/android-vuln
• https://github.com/weeka10/-hktalent-TOP
• https://github.com/wkhnh06/linux-kernel-exploitation
• https://github.com/xairy/linux-kernel-exploitation