Linux : Security Vulnerabilities, CVEs, Published In March 2015 (Memory corruption)
Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.
Max CVSS
10.0
EPSS Score
6.07%
Published
2015-03-16
Updated
2022-11-03
The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock.
Max CVSS
7.2
EPSS Score
0.04%
Published
2015-03-16
Updated
2023-12-22
2 vulnerabilities found