CVE-2015-1420: Debian Linux

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.

Affected products

• Debian Debian Linux: version 7.0 only
• Linux Linux Kernel: up to and including 3.18.9

Published 2015-03-16. Last modified 2026-06-17.