CVE-2015-0568

HIGH

Linux Kernel 3.0-3.19.8 - Use-After-Free in MSM-Camera Driver via ioctl Call

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-0568. PoCs published by betalphafai.

AI-analyzed exploit summary This is a local privilege escalation exploit for CVE-2015-0568, targeting a vulnerability in the Qualcomm MSM camera driver. It leverages a use-after-free condition via ioctl operations to achieve arbitrary kernel code execution, ultimately escalating privileges to root.

Description

Use-after-free vulnerability in the msm_set_crop function in drivers/media/video/msm/msm_camera.c in the MSM-Camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (memory corruption) via an application that makes a crafted ioctl call.

Exploits (1)

nomisec WORKING POC 4 stars
by betalphafai · poc
https://github.com/betalphafai/CVE-2015-0568

This is a local privilege escalation exploit for CVE-2015-0568, targeting a vulnerability in the Qualcomm MSM camera driver. It leverages a use-after-free condition via ioctl operations to achieve arbitrary kernel code execution, ultimately escalating privileges to root.

Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Complex
Reliability
Racy
Target: Qualcomm MSM camera driver (Android kernel module)
No auth needed
Prerequisites: Access to the target device · Presence of vulnerable MSM camera driver (/dev/msm_camera/config0)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/92379

Scores

CVSS v3 7.8
EPSS 0.0090
EPSS Percentile 55.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (1)
linux/linux_kernel 3.0 - 3.19.8
Published Aug 07, 2016
Tracked Since Feb 18, 2026