CVE-2015-6642

Description

The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24157888.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
linux	15.10 wily	Not affected
	15.04 vivid	Ignored end of life
	14.04 LTS trusty	Not affected
	12.04 LTS precise	Not affected
linux-armadaxp	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not affected
linux-flo	15.10 wily	Not affected
	15.04 vivid	Ignored end of life
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-fsl-imx51	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-goldfish	15.10 wily	Not affected
	15.04 vivid	Ignored end of life
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-grouper	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-linaro-omap	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-linaro-shared	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-linaro-vexpress	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-lts-quantal	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-lts-raring	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-lts-saucy	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-lts-trusty	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not affected
linux-lts-utopic	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-lts-vivid	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-lts-wily	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-lts-xenial	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not affected
	12.04 LTS precise	Not in release
linux-maguro	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-mako	15.10 wily	Not affected
	15.04 vivid	Ignored end of life
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-manta	15.10 wily	Not affected
	15.04 vivid	Ignored end of life
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-qcm-msm	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-raspi2	15.10 wily	Not affected
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-ti-omap4	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not affected

Notes

mdeslaur

android-specific

jdstrand

android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support

sbeattie

affects arch/arm/mach-msm only, so android kernels only

Severity score breakdown

Parameter	Value
Base score	9.8 · Critical
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Cvss 3 Severity Score