CVE-2015-8785

Published: Feb 8, 2016Modified: May 6, 2026

6.2

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.5 / Impact: 3.6

Source: NVD

Description

The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero length for the first segment of an iov.

Affected (6)

Products: Linux: Linux Kernel · Suse: Linux Enterprise Real Time Extension

1 product

1 product

Linux Enterprise Real Time Extension

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 4.4
Linux Linux Kernel	Version 4.4 rc1
Linux Linux Kernel	Version 4.4 rc2
Linux Linux Kernel	Version 4.4 rc3
Linux Linux Kernel	Version 4.4 rc4

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Real Time Extension	Version 12 sp1

Related CWEs

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (28)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3ca8138f014a913f98e6ef40e939868e1e9ea876

Source: security@debian.org

Issue TrackingPatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html

Source: security@debian.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html

Source: security@debian.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html

Source: security@debian.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html

Source: security@debian.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html

Source: security@debian.org

Third Party Advisory

http://www.debian.org/security/2016/dsa-3503

Source: security@debian.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/01/24/1

Source: security@debian.org

Mailing ListThird Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: security@debian.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

Source: security@debian.org

Third Party Advisory

http://www.securityfocus.com/bid/81688

Source: security@debian.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2886-1

Source: security@debian.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1290642

Source: security@debian.org

Issue Tracking

https://github.com/torvalds/linux/commit/3ca8138f014a913f98e6ef40e939868e1e9ea876

Source: security@debian.org

Issue TrackingPatchVendor Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3ca8138f014a913f98e6ef40e939868e1e9ea876

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.debian.org/security/2016/dsa-3503

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/01/24/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/bid/81688

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2886-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1290642

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://github.com/torvalds/linux/commit/3ca8138f014a913f98e6ef40e939868e1e9ea876

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchVendor Advisory

Timeline

No history available yet.