CVE-2015-8539

High

Description

The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c.

SeverityHigh

CVSS7.8

Exploit probability—

Product

Suse Linux Enterprise Real Time Extension

PublishedFeb 8, 2016

First seenFeb 8, 2016

How to fix

Update

linux linux_kernel4.4 or later

Vendor advisories

access.redhat.com/errata/RHSA-2018:0181
access.redhat.com/errata/RHSA-2018:0152
access.redhat.com/errata/RHSA-2018:0151
usn.ubuntu.com/3798-1/
usn.ubuntu.com/3798-2/

Affected products

Product	Affected versions	Fixed in
suse linux_enterprise_real_time_extension	12	—
canonical ubuntu_linux	12.04, 14.04	—
linux linux_kernel	v < 4.4, 4.4	4.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.