Back to search
CVE-2015-7990
Published: Dec 28, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6937.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
SUSE-SU-2015:2292
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:0337
vendor-advisory
x_refsource_SUSE
SUSE-SU-2015:2350
vendor-advisory
x_refsource_SUSE
https://bugzilla.redhat.com/show_bug.cgi?id=1276437
x_refsource_CONFIRM
SUSE-SU-2016:0434
vendor-advisory
x_refsource_SUSE
USN-2887-2
vendor-advisory
x_refsource_UBUNTU
[linux-kernel] 20151016 [PATCH] RDS: fix race condition when sending a message on unbound socket.
mailing-list
x_refsource_MLIST
1034453
vdb-entry
x_refsource_SECTRACK
USN-2886-1
vendor-advisory
x_refsource_UBUNTU
USN-2887-1
vendor-advisory
x_refsource_UBUNTU
https://bugzilla.suse.com/show_bug.cgi?id=952384
x_refsource_CONFIRM
SUSE-SU-2015:2194
vendor-advisory
x_refsource_SUSE
USN-2890-3
vendor-advisory
x_refsource_UBUNTU
openSUSE-SU-2015:2232
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:0380
vendor-advisory
x_refsource_SUSE
USN-2889-1
vendor-advisory
x_refsource_UBUNTU
SUSE-SU-2016:0354
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:0335
vendor-advisory
x_refsource_SUSE
SUSE-SU-2015:2339
vendor-advisory
x_refsource_SUSE
SUSE-SU-2015:2108
vendor-advisory
x_refsource_SUSE
USN-2889-2
vendor-advisory
x_refsource_UBUNTU
[oss-security] 20151027 Re: CVE-2015-6937 - Linux kernel - NULL pointer dereference in net/rds/connection.c
mailing-list
x_refsource_MLIST
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3
x_refsource_CONFIRM
SUSE-SU-2016:0383
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:0386
vendor-advisory
x_refsource_SUSE
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
x_refsource_CONFIRM
SUSE-SU-2016:2074
vendor-advisory
x_refsource_SUSE
USN-2890-2
vendor-advisory
x_refsource_UBUNTU
77340
vdb-entry
x_refsource_BID
SUSE-SU-2016:0384
vendor-advisory
x_refsource_SUSE
DSA-3396
vendor-advisory
x_refsource_DEBIAN
USN-2890-1
vendor-advisory
x_refsource_UBUNTU
SUSE-SU-2016:0387
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:0381
vendor-advisory
x_refsource_SUSE
USN-2888-1
vendor-advisory
x_refsource_UBUNTU
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now