CVE-2015-6640

The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in…

published January 6, 2016

CVSS
—
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows attackers to gain privileges or cause a denial of service (vma list corruption) via a crafted application, aka internal bug 20017123.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00729 · 53.4th percentile
Published
2016-01-06T19:00Z
EPSS history
Timeline
  • 06 JAN 19:00Z
    The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in…
    cvelistv5