The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-abi-whitelistsUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-firmwareUpgrade kernel-docUpgrade python-perf | Jul 6, 2016 | Mar 23, 2016 |
| Debian | — | Upgrade linux | Mar 4, 2016 | Mar 3, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 13, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfo-commonUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade kernel-tools | Nov 30, 2017 | Apr 27, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 27, 2016 | Apr 27, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 2, 2016 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-ec2 | Mar 22, 2016 | Mar 16, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-86-generic-lpaeUpgrade linux-image-3.2.0-102-powerpc64-smpUpgrade linux-image-3.13.0-86-lowlatencyUpgrade linux-image-3.13.0-86-powerpc64-smpUpgrade linux-image-3.13.0-86-powerpc-e500Upgrade linux-image-3.2.0-1480-omap4Upgrade linux-image-3.2.0-102-highbankUpgrade linux-image-3.2.0-102-omapUpgrade linux-image-3.2.0-102-virtualUpgrade linux-image-3.2.0-102-powerpc-smpUpgrade linux-image-3.2.0-102-generic-paeUpgrade linux-image-3.13.0-86-powerpc64-embUpgrade linux-image-3.13.0-86-powerpc-smpUpgrade linux-image-3.13.0-86-genericUpgrade linux-image-3.13.0-86-powerpc-e500mcUpgrade linux-image-3.2.0-102-generic | May 9, 2016 | Apr 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub