The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the use of an uninitialized list entry, aka Android internal bug 26186802, a different vulnerability than CVE-2015-3636.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 28, 2016 | Mar 12, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 10, 2015 |
| Ubuntu | — | Upgrade linux-image-3.2.0-102-omapUpgrade linux-image-4.2.0-36-powerpc-e500mcUpgrade linux-image-3.2.0-102-powerpc-smpUpgrade linux-image-3.19.0-59-powerpc64-smpUpgrade linux-image-3.19.0-59-lowlatencyUpgrade linux-image-3.16.0-71-genericUpgrade linux-image-3.19.0-59-powerpc-e500mcUpgrade linux-image-3.19.0-59-genericUpgrade linux-image-4.2.0-36-genericUpgrade linux-image-3.16.0-71-powerpc-e500mcUpgrade linux-image-3.2.0-102-generic-paeUpgrade linux-image-4.2.0-36-powerpc-smpUpgrade linux-image-3.13.0-86-powerpc64-smpUpgrade linux-image-4.2.0-36-lowlatencyUpgrade linux-image-3.2.0-1480-omap4Upgrade linux-image-3.19.0-59-powerpc-smpUpgrade linux-image-3.13.0-86-powerpc-e500Upgrade linux-image-3.16.0-71-powerpc64-smpUpgrade linux-image-4.2.0-1029-raspi2Upgrade linux-image-3.16.0-71-lowlatencyUpgrade linux-image-3.16.0-71-powerpc-smpUpgrade linux-image-3.19.0-59-generic-lpaeUpgrade linux-image-3.13.0-86-genericUpgrade linux-image-3.13.0-86-powerpc-e500mcUpgrade linux-image-3.2.0-102-highbankUpgrade linux-image-3.19.0-59-powerpc64-embUpgrade linux-image-3.16.0-71-powerpc64-embUpgrade linux-image-3.13.0-86-powerpc64-embUpgrade linux-image-3.13.0-86-generic-lpaeUpgrade linux-image-4.2.0-36-generic-lpaeUpgrade linux-image-3.2.0-102-powerpc64-smpUpgrade linux-image-3.13.0-86-powerpc-smpUpgrade linux-image-3.13.0-86-lowlatencyUpgrade linux-image-4.2.0-36-powerpc64-embUpgrade linux-image-3.16.0-71-generic-lpaeUpgrade linux-image-3.2.0-102-genericUpgrade linux-image-3.2.0-102-virtualUpgrade linux-image-4.2.0-36-powerpc64-smp | May 9, 2016 | Mar 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub