Oval Definition:oval:com.ubuntu.bionic:def:201566400000000
Revision Date:2016-01-06Version:1
Title:CVE-2015-6640 on Ubuntu 18.04 LTS (bionic) - medium.
Description:The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows attackers to gain privileges or cause a denial of service (vma list corruption) via a crafted application, aka internal bug 20017123.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2015-6640
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND Package Information
  • NOT linux-image-4.15.0-51-generic package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-4.15.0-51-generic-lpae package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-4.15.0-51-lowlatency package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-unsigned-4.15.0-51-generic package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-unsigned-4.15.0-51-lowlatency package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-4.15.0-1040-aws package in bionic, while related to the CVE in some way, is not affected (note: 'android only kernel').
  • OR NOT linux-image-unsigned-4.18.0-1018-azure package in bionic, while related to the CVE in some way, is not affected (note: 'android kernels only').
  • OR NOT linux-image-unsigned-4.15.0-1033-gcp package in bionic, while related to the CVE in some way, is not affected (note: 'android only kernel').
  • OR NOT linux-image-4.18.0-21-generic package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-4.18.0-21-generic-lpae package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-4.18.0-21-lowlatency package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-4.18.0-21-snapdragon package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-unsigned-4.18.0-21-generic package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-unsigned-4.18.0-21-lowlatency package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-4.15.0-1035-kvm package in bionic, while related to the CVE in some way, is not affected (note: 'android only kernel').
  • OR NOT linux-image-extra-virtual package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-extra-virtual-hwe-16.04 package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-extra-virtual-hwe-16.04-edge package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-generic package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-generic-hwe-16.04 package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-generic-hwe-16.04-edge package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-generic-lpae package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-generic-lpae-hwe-16.04 package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-generic-lpae-hwe-16.04-edge package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-lowlatency package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-lowlatency-hwe-16.04 package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-lowlatency-hwe-16.04-edge package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-virtual package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-virtual-hwe-16.04 package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-virtual-hwe-16.04-edge package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-aws package in bionic, while related to the CVE in some way, is not affected (note: 'android only kernel').
  • OR NOT linux-image-azure package in bionic, while related to the CVE in some way, is not affected (note: 'android kernels only').
  • OR NOT linux-image-gcp package in bionic, while related to the CVE in some way, is not affected (note: 'android only kernel').
  • OR NOT linux-image-extra-virtual-hwe-18.04 package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-generic-hwe-18.04 package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-generic-lpae-hwe-18.04 package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-lowlatency-hwe-18.04 package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-snapdragon-hwe-18.04 package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-virtual-hwe-18.04 package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-kvm package in bionic, while related to the CVE in some way, is not affected (note: 'android only kernel').
  • OR NOT linux-image-oem package in bionic, while related to the CVE in some way, is not affected (note: 'android only kernel').
  • OR NOT linux-image-raspi2 package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-snapdragon package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-unsigned-4.15.0-1039-oem package in bionic, while related to the CVE in some way, is not affected (note: 'android only kernel').
  • OR NOT linux-image-4.15.0-1037-raspi2 package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-4.15.0-51-generic package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-4.15.0-51-lowlatency package in bionic, while related to the CVE in some way, is not affected (note: 'android kernel only').
  • OR NOT linux-image-4.18.0-1019-azure package in bionic, while related to the CVE in some way, is not affected (note: 'android kernels only').
  • OR NOT linux-image-4.15.0-1033-gcp package in bionic, while related to the CVE in some way, is not affected (note: 'android only kernel').
  • OR NOT linux-image-4.18.0-21-generic package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-4.18.0-21-lowlatency package in bionic, while related to the CVE in some way, is not affected.
  • OR NOT linux-image-4.15.0-1039-oem package in bionic, while related to the CVE in some way, is not affected (note: 'android only kernel').
  • OR NOT linux-image-4.15.0-1054-snapdragon package in bionic, while related to the CVE in some way, is not affected.
  • BACK