CVE-2015-9289: Buffer Overflow
A vulnerability was found in Linux Kernel, an out-of-bounds read occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.
This was originally classfied as a buffer-overflow but it is not. It has been reclassified as a possible information leak.
Reference: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1fa2337a315a2448c5434f41e00d56b01a22283c https://github.com/torvalds/linux/commit/1fa2337a315a2448c5434f41e00d56b01a22283c https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4
Other sources
A vulnerability was found in the Linux kernel’s CX24116 tv-card driver, where an out of bounds read occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. An attacker could use this flaw to leak kernel private information to userspace.
In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.
Linux Kernel is vulnerable to a buffer overflow, caused by a flaw when checking userspace params in drivers/media/dvb-frontends/cx24116.c. By sending a specially-crafted request, a remote attacker could overflow a buffer and execute arbitrary code on the system.
— IBM
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2015-9289?
CVE-2015-9289 has a medium severity rating due to the potential for out-of-bounds read vulnerabilities in the Linux Kernel.
How do I fix CVE-2015-9289?
To fix CVE-2015-9289, update to the recommended kernel versions 0:3.10.0-1127.rt56.1093.el7 or 0:3.10.0-1127.el7.
Which versions of the Linux Kernel are affected by CVE-2015-9289?
CVE-2015-9289 affects Linux Kernel versions up to 4.1.4.
What software products are impacted by CVE-2015-9289?
CVE-2015-9289 impacts Red Hat kernel and IBM Data Risk Manager versions up to 2.0.6.
Is there a patch available for CVE-2015-9289?
Yes, patches are available for the affected versions as mentioned in the Red Hat and IBM release notes.