Published: 08/02/2016 Updated: 31/01/2022

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 6.2 | Impact Score: 3.6 | Exploitability Score: 2.5

VMScore: 437

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel prior to 4.4 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero length for the first segment of an iov.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
linux linux kernel 4.4
suse linux enterprise real time extension 12

An infinite-loop flaw was found in the kernel When a local user calls the sys_writev syscall with a specially crafted sequence of iov structs, the fuse_fill_write_pages kernel function might never terminate, instead continuing in a tight loop This process cannot be terminated and requires a reboot ...

USN-2908-2 introduced a regression in the Ubuntu 1510 Linux kernel backported to Ubuntu 1404 LTS ...

Several security issues were fixed in the kernel ...

USN-2908-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

USN-2909-1 introduced a regression in the Ubuntu 1410 Linux kernel backported to Ubuntu 1404 LTS ...

USN-2910-1 introduced a regression in the Ubuntu 1504 Linux kernel backported to Ubuntu 1404 LTS ...

Several security issues were fixed in the kernel ...

CWE-835 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3ca8138f014a913f98e6ef40e939868e1e9ea876 http://www.openwall.com/lists/oss-security/2016/01/24/1 https://bugzilla.redhat.com/show_bug.cgi?id=1290642 https://github.com/torvalds/linux/commit/3ca8138f014a913f98e6ef40e939868e1e9ea876 http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html http://www.securityfocus.com/bid/81688 http://www.debian.org/security/2016/dsa-3503 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html http://www.ubuntu.com/usn/USN-2886-1 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-8785 https://usn.ubuntu.com/2908-5/

CVE-2015-8785

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect