CVE-2015-8967
HIGHLinux Kernel < 3.18.54 and Android < 7.0 - Privilege Escalation via System-Call Table Modification
Title source: llmDescription
arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the "strict page permissions" protection mechanism and modify the system-call table, and consequently gain privileges, by leveraging write access.
References (4)
Core 4
Core References
Issue Tracking, Patch, Vendor Advisory x_refsource_confirm
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c623b33b4e9599c6ac5076f7db7369eb9869aa04
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://github.com/torvalds/linux/commit/c623b33b4e9599c6ac5076f7db7369eb9869aa04
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/94680
Third Party Advisory x_refsource_confirm
http://source.android.com/security/bulletin/2016-12-01.html
Scores
CVSS v3
7.8
EPSS
0.0083
EPSS Percentile
54.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-264
Status
published
Products (2)
google/android
< 7.0
linux/linux_kernel
< 3.18.54
Published
Dec 08, 2016
Tracked Since
Feb 18, 2026