PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2015-7312

CVE-2015-7312

kernel: multiple race conditions in aufs

Loading…

Severity

Low

Red Hat Product Security

4

CVSS 3.1

Review impact separately from score.

Published · September 22, 2015

Updated · June 28, 2026

Description

Multiple race conditions in the Advanced Union Filesystem (aufs) aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service (use-after-free and BUG) or possibly gain privileges via a (1) madvise or (2) msync system call, related to mm/madvise.c and mm/msync.c.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')