PT-2016-3994 · Linux+3 · Linux Kernel+3

Vladis Dronov · Published 2015-10-06 · Updated 2018-01-05 · CVE-2015-8746

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.2.2

Description The issue is related to the NFS client in the Linux kernel, where memory for migration recovery operations is not properly initialized. This allows remote NFS servers to cause a denial of service, resulting in a NULL pointer dereference and panic, via crafted network traffic.

Recommendations For Linux kernel versions prior to 4.2.2, update to version 4.2.2 or later to resolve the issue.

Exploit

Fix

Related Identifiers

ALT-PU-2015-1834

ALT-PU-2016-1485

CESA-2016_2574

CVE-2015-8746

RHSA-2016:2574

RHSA-2016:2584

RHSA-2016_2574

RHSA-2016_2584

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

References · 20

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384 · Exploit
• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• 🔥 https://github.com/whu-enjoy/CVE-2015-8660 · Exploit
• https://github.com/torvalds/linux/commit/18e3b739fdc826481c6a1335ce0c5b19b3d415da · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-8746 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8746 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8746 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2584.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2574.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-8746 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-2574.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-8746 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-8746 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8746 · Vendor Advisory