CVE-2015-8844 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.5 MEDIUM	LOCAL	LOW	NONE	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 26%

Vendor	Product	Version
linux	linux_kernel	𝑥 ≤ 4.3.4

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
wheezy	not-affected
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
trixie	6.11.5-1 fixed
sid	6.11.6-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

yakkety	not-affected
xenial	not-affected
wily	Fixed 4.2.0-27.32 released
trusty	Fixed 3.13.0-77.121 released
precise	not-affected

linux-armadaxp

yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	not-affected

linux-aws

yakkety	dne
xenial	not-affected
trusty	not-affected
precise	dne

linux-flo

yakkety	not-affected
xenial	not-affected
wily	not-affected
trusty	dne
precise	dne

linux-gke

yakkety	dne
xenial	not-affected
trusty	dne
precise	dne

linux-goldfish

yakkety	not-affected
xenial	not-affected
wily	not-affected
trusty	dne
precise	dne

linux-grouper

yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	dne

linux-hwe

yakkety	dne
xenial	not-affected
trusty	dne
precise	dne

linux-hwe-edge

yakkety	dne
xenial	not-affected
trusty	dne
precise	dne

linux-linaro-omap

yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-linaro-shared

yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-linaro-vexpress

yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-lts-quantal

yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-lts-raring

yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-lts-saucy

yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-lts-trusty

yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	Fixed 3.13.0-77.121~precise1 released

linux-lts-utopic

yakkety	dne
xenial	dne
wily	dne
trusty	Fixed 3.16.0-60.80~14.04.1 released
precise	dne

linux-lts-vivid

yakkety	dne
xenial	dne
wily	dne
trusty	Fixed 3.19.0-49.55~14.04.1 released
precise	dne

linux-lts-wily

yakkety	dne
xenial	dne
wily	dne
trusty	Fixed 4.2.0-27.32~14.04.1 released
precise	dne

linux-lts-xenial

yakkety	dne
xenial	dne
wily	dne
trusty	not-affected
precise	dne

linux-maguro

yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	dne

linux-mako

yakkety	not-affected
xenial	not-affected
wily	not-affected
trusty	dne
precise	dne

linux-manta

yakkety	dne
xenial	dne
wily	not-affected
trusty	dne
precise	dne

linux-qcm-msm

yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	ignored

linux-raspi2

yakkety	not-affected
xenial	not-affected
wily	Fixed 4.2.0-1022.29 released
trusty	dne
precise	dne

linux-snapdragon

yakkety	not-affected
xenial	not-affected
wily	dne
trusty	dne
precise	dne

linux-ti-omap4

yakkety	dne
xenial	dne
wily	dne
trusty	dne
precise	not-affected

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d2b9d2a5ad5ef04ff978c9923d19730cb05efd55

http://rhn.redhat.com/errata/RHSA-2016-2574.html

http://rhn.redhat.com/errata/RHSA-2016-2584.html

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.5

http://www.openwall.com/lists/oss-security/2016/04/13/1

http://www.securitytracker.com/id/1035594

https://bugzilla.redhat.com/show_bug.cgi?id=1326540

https://github.com/torvalds/linux/commit/d2b9d2a5ad5ef04ff978c9923d19730cb05efd55