Published: 27/07/2015 Updated: 22/09/2017

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 437

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The kvm_apic_has_events function in arch/x86/kvm/lapic.h in the Linux kernel up to and including 4.1.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak CVE-2015-1333 Colin Ian King discovered a flaw in the add_key function of the Linux kernel's keyring subsystem A local user can exploit this flaw to cause a denial of service due to memory ex ...

Several security issues were fixed in the kernel ...

Ubuntu defibrillates 14.10 for one LAST patch

The Register • Richard Chirgwin • 27 Jul 2015

Utopic Unicorn gets another gallop to leap security rainbow

Ubuntu has changed its mind on an end-of-life announcement, giving Version 14.10 one last kernel patch to cover off some big vulns. Usually, end-of-life means what it says: a version isn't going to get any more updates, and that was the status of Ubuntu 14.10 “Utopic Unicorn” (guys, it's time to rethink your naming conventions) after July 23. However, the outfit has decided it needs one last patch due to the severity of the bugs discussed here. The bugs are CVE-2015-4692, a KVM NULL-pointer ...

NVD-CWE-Other https://github.com/torvalds/linux/commit/ce40cd3fc7fa40a6119e5fe6c0f2bc0eb4541009 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce40cd3fc7fa40a6119e5fe6c0f2bc0eb4541009 http://www.openwall.com/lists/oss-security/2015/06/21/1 https://bugzilla.redhat.com/show_bug.cgi?id=1230770 http://www.securityfocus.com/bid/75142 http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161144.html http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160829.html http://www.debian.org/security/2015/dsa-3329 http://www.ubuntu.com/usn/USN-2684-1 http://www.ubuntu.com/usn/USN-2683-1 http://www.ubuntu.com/usn/USN-2682-1 http://www.ubuntu.com/usn/USN-2681-1 http://www.ubuntu.com/usn/USN-2680-1 http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html http://www.securitytracker.com/id/1032798 https://nvd.nist.gov https://www.debian.org/security/./dsa-3329 https://usn.ubuntu.com/2684-1/

CVE-2015-4692

Vulnerability Summary

Vendor Advisories

Recent Articles

References

Vulmon Search

About

Products

Connect