crítica
CVE-2015-8812
kernel: CXGB3: Logic bug in return code handling prematurely frees key structures causing Use after free or kernel panic.
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.9AV:L/AC:M/Au:N/C:C/I:C/A:C
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Oracle (alta), Red Hat (media), Ubuntu (media).
Descripción
drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| debian 11 | linux | 4.4.2-1 |
| debian 12 | linux | 4.4.2-1 |
| debian 13 | linux | 4.4.2-1 |
| debian 14 | linux | 4.4.2-1 |
| debian 7 | linux | 3.2.73-2+deb7u3 |
| debian 8 | linux | 3.16.7-ckt20-1+deb8u4 |
| echo | linux | 4.4.2-1 |
| Oracle Linux 7 | kernel, kernel-abi-whitelists, kernel-debug y 9 más | 3.10.0-514.el7 |
| Red Hat | kernel, kernel-abi-whitelists, kernel-bootwrapper y 10 más | sin corrección indicada |
| root.io debian 11 | rootio-linux | 4.4.2-1 |
| root.io debian 12 | rootio-linux | 4.4.2-1 |
| root.io debian 13 | rootio-linux | 4.4.2-1 |
Mostrar las 49 entradas de 18 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| debian 11 | linux | 4.4.2-1 |
| debian 12 | linux | 4.4.2-1 |
| debian 13 | linux | 4.4.2-1 |
| debian 14 | linux | 4.4.2-1 |
| debian 7 | linux | 3.2.73-2+deb7u3 |
| debian 8 | linux | 3.16.7-ckt20-1+deb8u4 |
| echo | linux | 4.4.2-1 |
| Oracle Linux 7 | kernel | 3.10.0-514.el7 |
| Oracle Linux 7 | kernel-abi-whitelists | 3.10.0-514.el7 |
| Oracle Linux 7 | kernel-debug | 3.10.0-514.el7 |
| Oracle Linux 7 | kernel-debug-devel | 3.10.0-514.el7 |
| Oracle Linux 7 | kernel-devel | 3.10.0-514.el7 |
| Oracle Linux 7 | kernel-doc | 3.10.0-514.el7 |
| Oracle Linux 7 | kernel-headers | 3.10.0-514.el7 |
| Oracle Linux 7 | kernel-tools | 3.10.0-514.el7 |
| Oracle Linux 7 | kernel-tools-libs | 3.10.0-514.el7 |
| Oracle Linux 7 | kernel-tools-libs-devel | 3.10.0-514.el7 |
| Oracle Linux 7 | perf | 3.10.0-514.el7 |
| Oracle Linux 7 | python-perf | 3.10.0-514.el7 |
| Red Hat | kernel | sin corrección indicada |
| Red Hat | kernel-abi-whitelists | sin corrección indicada |
| Red Hat | kernel-bootwrapper | sin corrección indicada |
| Red Hat | kernel-debug | sin corrección indicada |
| Red Hat | kernel-debug-devel | sin corrección indicada |
| Red Hat | kernel-devel | sin corrección indicada |
| Red Hat | kernel-doc | sin corrección indicada |
| Red Hat | kernel-firmware | sin corrección indicada |
| Red Hat | kernel-headers | sin corrección indicada |
| Red Hat | kernel-kdump | sin corrección indicada |
| Red Hat | kernel-kdump-devel | sin corrección indicada |
| Red Hat | perf | sin corrección indicada |
| Red Hat | python-perf | sin corrección indicada |
| root.io debian 11 | rootio-linux | 4.4.2-1 |
| root.io debian 12 | rootio-linux | 4.4.2-1 |
| root.io debian 13 | rootio-linux | 4.4.2-1 |
| ubuntu 12.04 | linux | 3.2.0-102.142 |
| ubuntu 12.04 | linux-armadaxp | 3.2.0-1665.90 |
| ubuntu 12.04 | linux-lts-trusty | 3.13.0-85.129~precise1 |
| ubuntu 12.04 | linux-ti-omap4 | 3.2.0-1480.106 |
| ubuntu 12.04-ESM | linux | 3.2.0-102.142 |
| ubuntu 12.04-ESM | linux-lts-trusty | 3.13.0-85.129~precise1 |
| ubuntu 14.04 | linux | 3.13.0-85.129 |
| ubuntu 14.04 | linux-lts-utopic | 3.16.0-69.89~14.04.1 |
| ubuntu 14.04 | linux-lts-vivid | 3.19.0-58.64~14.04.1 |
| ubuntu 14.04 | linux-lts-wily | 4.2.0-35.40~14.04.1 |
| ubuntu 14.04-ESM | linux | 3.13.0-85.129 |
| ubuntu 15.04 | linux | 3.19.0-58.64 |
| ubuntu 15.10 | linux | 4.2.0-35.40 |
| ubuntu 15.10 | linux-raspi2 | 4.2.0-1028.36 |
Referencias
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html
Las 50 referencias
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
- http://rhn.redhat.com/errata/RHSA-2016-2574.html
- http://rhn.redhat.com/errata/RHSA-2016-2584.html
- http://www.debian.org/security/2016/dsa-3503
- http://www.openwall.com/lists/oss-security/2016/02/11/1
- http://www.securityfocus.com/bid/83218
- http://www.ubuntu.com/usn/USN-2946-1
- http://www.ubuntu.com/usn/USN-2946-2
- http://www.ubuntu.com/usn/USN-2947-1
- http://www.ubuntu.com/usn/USN-2947-2
- http://www.ubuntu.com/usn/USN-2947-3
- http://www.ubuntu.com/usn/USN-2948-1
- http://www.ubuntu.com/usn/USN-2948-2
- http://www.ubuntu.com/usn/USN-2949-1
- http://www.ubuntu.com/usn/USN-2967-1
- http://www.ubuntu.com/usn/USN-2967-2
- https://access.redhat.com/security/cve/CVE-2015-8812
- https://bugzilla.redhat.com/show_bug.cgi?id=1303532
- https://github.com/torvalds/linux/commit/67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3
- https://linux.oracle.com/cve/CVE-2015-8812.html
- https://linux.oracle.com/errata/ELSA-2016-2574.html
- https://nvd.nist.gov/vuln/detail/CVE-2015-8812
- https://ubuntu.com/security/notices/USN-2946-1
- https://ubuntu.com/security/notices/USN-2946-2
- https://ubuntu.com/security/notices/USN-2947-1
- https://ubuntu.com/security/notices/USN-2947-2
- https://ubuntu.com/security/notices/USN-2947-3
- https://ubuntu.com/security/notices/USN-2948-1
- https://ubuntu.com/security/notices/USN-2949-1
- https://ubuntu.com/security/notices/USN-2967-1
- https://ubuntu.com/security/notices/USN-2967-2
- https://www.cve.org/CVERecord?id=CVE-2015-8812