CVE-2015-8543
- State
- Published
- Severity
- Not scored
- Published
- Dec 28, 2015
- Updated
- Aug 6, 2024
- Reserved
- Dec 11, 2015
Description
The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2016:0855vendor-advisory
- 1034892vdb-entry
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- USN-2886-1vendor-advisory
- USN-2890-3vendor-advisory
- RHSA-2016:2584vendor-advisory
- RHSA-2016:2574vendor-advisory
- SUSE-SU-2016:1102vendor-advisory
- 79698vdb-entry
- SUSE-SU-2016:2074vendor-advisory
- USN-2890-2vendor-advisory
- https://github.com/torvalds/linux/commit/79462ad02e861803b3840cc782248c7359451cd9
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79462ad02e861803b3840cc782248c7359451cd9
- DSA-3426vendor-advisory
- [oss-security] 20151209 Re: CVE request - Android kernel - IPv6 connect cause a denial of servicemailing-list
- USN-2890-1vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1290475
- DSA-3434vendor-advisory
- USN-2888-1vendor-advisory
- SUSE-SU-2016:0911vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.