CVE 2015-0571
The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not verify authorization for private SET IOCTL calls, which allows attackers to gain privileges via a crafted application, related to wlan_hdd_hostapd.c and wlan_hdd_wext.c.
Related bugs and status
CVE-2015-0571 (Candidate) is related to these bugs:
Bug #1580365: CVE-2015-0571
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 1580365 | CVE-2015-0571 | linux (Ubuntu) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-ti-omap4 (Ubuntu) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-raspi2 (Ubuntu) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux (Ubuntu Yakkety) | Medium | Won't Fix | ||
| 1580365 | CVE-2015-0571 | linux-raspi2 (Ubuntu Yakkety) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-ti-omap4 (Ubuntu Yakkety) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux (Ubuntu Xenial) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-raspi2 (Ubuntu Xenial) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-ti-omap4 (Ubuntu Xenial) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux (Ubuntu Wily) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-raspi2 (Ubuntu Wily) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-ti-omap4 (Ubuntu Wily) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux (Ubuntu Vivid) | Undecided | Won't Fix | ||
| 1580365 | CVE-2015-0571 | linux-raspi2 (Ubuntu Vivid) | Undecided | Won't Fix | ||
| 1580365 | CVE-2015-0571 | linux-ti-omap4 (Ubuntu Vivid) | Undecided | Won't Fix | ||
| 1580365 | CVE-2015-0571 | linux (Ubuntu Trusty) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-raspi2 (Ubuntu Trusty) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-ti-omap4 (Ubuntu Trusty) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux (Ubuntu Precise) | Medium | Won't Fix | ||
| 1580365 | CVE-2015-0571 | linux-raspi2 (Ubuntu Precise) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-ti-omap4 (Ubuntu Precise) | Medium | Won't Fix | ||
| 1580365 | CVE-2015-0571 | linux-lts-trusty (Ubuntu) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-trusty (Ubuntu Precise) | Medium | Won't Fix | ||
| 1580365 | CVE-2015-0571 | linux-lts-trusty (Ubuntu Trusty) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-trusty (Ubuntu Vivid) | Undecided | Won't Fix | ||
| 1580365 | CVE-2015-0571 | linux-lts-trusty (Ubuntu Wily) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-trusty (Ubuntu Xenial) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-trusty (Ubuntu Yakkety) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-armadaxp (Ubuntu) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-armadaxp (Ubuntu Precise) | Medium | Won't Fix | ||
| 1580365 | CVE-2015-0571 | linux-armadaxp (Ubuntu Trusty) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-armadaxp (Ubuntu Vivid) | Undecided | Won't Fix | ||
| 1580365 | CVE-2015-0571 | linux-armadaxp (Ubuntu Wily) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-armadaxp (Ubuntu Xenial) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-armadaxp (Ubuntu Yakkety) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-xenial (Ubuntu) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-xenial (Ubuntu Precise) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-xenial (Ubuntu Trusty) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-lts-xenial (Ubuntu Vivid) | Undecided | New | ||
| 1580365 | CVE-2015-0571 | linux-lts-xenial (Ubuntu Wily) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-xenial (Ubuntu Xenial) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-xenial (Ubuntu Yakkety) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-vivid (Ubuntu) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-vivid (Ubuntu Precise) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-vivid (Ubuntu Trusty) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-lts-vivid (Ubuntu Vivid) | Undecided | Won't Fix | ||
| 1580365 | CVE-2015-0571 | linux-lts-vivid (Ubuntu Wily) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-vivid (Ubuntu Xenial) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-vivid (Ubuntu Yakkety) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-goldfish (Ubuntu) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-goldfish (Ubuntu Precise) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-goldfish (Ubuntu Trusty) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-goldfish (Ubuntu Vivid) | Undecided | New | ||
| 1580365 | CVE-2015-0571 | linux-goldfish (Ubuntu Wily) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-goldfish (Ubuntu Xenial) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-goldfish (Ubuntu Yakkety) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-lts-saucy (Ubuntu) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-saucy (Ubuntu Precise) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-saucy (Ubuntu Trusty) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-saucy (Ubuntu Vivid) | Undecided | Won't Fix | ||
| 1580365 | CVE-2015-0571 | linux-lts-saucy (Ubuntu Wily) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-saucy (Ubuntu Xenial) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-saucy (Ubuntu Yakkety) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-snapdragon (Ubuntu) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-snapdragon (Ubuntu Precise) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-snapdragon (Ubuntu Trusty) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-snapdragon (Ubuntu Vivid) | Undecided | New | ||
| 1580365 | CVE-2015-0571 | linux-snapdragon (Ubuntu Wily) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-snapdragon (Ubuntu Xenial) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-snapdragon (Ubuntu Yakkety) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-lts-wily (Ubuntu) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-wily (Ubuntu Precise) | Medium | Invalid | ||
| 1580365 | CVE-2015-0571 | linux-lts-wily (Ubuntu Trusty) | Medium | New | ||
| 1580365 | CVE-2015-0571 | linux-lts-wily (Ubuntu Vivid) | Undecided | New | ||
| 1580365 | CVE-2015-0571 | linux-lts-wily (Ubuntu Wily) | Medium | Invalid | ||
See the 
CVE page on Mitre.org
for more details.
