CVE-2015-8812

Published: Apr 27, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.

Affected (12)

Products: Novell: Suse Linux Enterprise Real Time Extension · Linux: Linux Kernel · Canonical: Ubuntu Linux

Novell

1 product

Suse Linux Enterprise Real Time Extension

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Real Time Extension	Version 12 sp1

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.2.78
Linux Linux Kernel	From 3.11 to 3.12.56
Linux Linux Kernel	From 3.13 to 3.14.63
Linux Linux Kernel	From 3.15 to 3.16.35
Linux Linux Kernel	From 3.17 to 3.18.31
Linux Linux Kernel	From 3.19 to 4.1.22
Linux Linux Kernel	From 3.3 to 3.10.99
Linux Linux Kernel	From 4.2.0 to 4.4.4

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10

References (72)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3

Source: cve@mitre.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2574.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2584.html

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2016/dsa-3503

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/02/11/1

Source: cve@mitre.org

Mailing ListRelease NotesThird Party Advisory

http://www.securityfocus.com/bid/83218

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2946-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2946-2

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2947-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2947-2

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2947-3

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2948-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2948-2

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2949-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2967-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2967-2

Source: cve@mitre.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1303532

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://github.com/torvalds/linux/commit/67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3

Source: cve@mitre.org

PatchVendor Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3