Published: 19/10/2015 Updated: 04/11/2017

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 188

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel prior to 4.1.5 allows local users to cause a denial of service (memory consumption) via a VHOST_SET_LOG_FD ioctl call that triggers permanent file-descriptor allocation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Debian Bug report logs - #796036 linux-image-3160-4-amd64: concurrent msync triggers NULL pointer dereference Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: Xavier Chantry <xavierchantry@interseccom> Date: Tue, 18 Aug 2015 18:09:01 UTC Severity: i ...

Several security issues were fixed in the kernel ...

A flaw was found in the way the Linux kernel's vhost driver treated userspace provided log file descriptor when processing the VHOST_SET_LOG_FD ioctl command The file descriptor was never released and continued to consume kernel memory A privileged local user with access to the /dev/vhost-net files could use this flaw to create a denial-of-servic ...

CWE-399 http://www.openwall.com/lists/oss-security/2015/08/18/3 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.5 https://github.com/torvalds/linux/commit/7932c0bd7740f4cd2aa168d3ce0199e7af7d72d5 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7932c0bd7740f4cd2aa168d3ce0199e7af7d72d5 https://bugzilla.redhat.com/show_bug.cgi?id=1251839 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html http://www.securityfocus.com/bid/76400 http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html http://www.ubuntu.com/usn/USN-2777-1 http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html http://www.ubuntu.com/usn/USN-2748-1 http://www.ubuntu.com/usn/USN-2752-1 http://www.ubuntu.com/usn/USN-2760-1 http://www.ubuntu.com/usn/USN-2759-1 http://www.ubuntu.com/usn/USN-2751-1 http://www.ubuntu.com/usn/USN-2749-1 http://www.securitytracker.com/id/1033666 http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html http://www.debian.org/security/2015/dsa-3364 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796036 https://usn.ubuntu.com/2749-1/https://access.redhat.com/security/cve/cve-2015-6252

CVE-2015-6252

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect