CVE-2015-6937 : The __rds_conn_create function in net/rds/connection.c in the Linux kernel throu

The __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound.

Published 2015-10-19 10:59:07

Updated 2018-10-17 01:29:28

Source MITRE

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2015-6937

Debian » Debian Linux » Version: 7.0
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions up to, including, (<=) 4.2.3
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 12.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 14.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2015-6937

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 8 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-6937

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.9	MEDIUM	AV:L/AC:L/Au:N/C:N/I:N/A:C	3.9	6.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

References for CVE-2015-6937

http://www.debian.org/security/2015/dsa-3364

Debian -- Security Information -- DSA-3364-1 linux
Third Party Advisory

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=1263139

1263139 – (CVE-2015-6937) CVE-2015-6937 kernel: net: rds: NULL pointer dereference in net/rds/connection.c
Issue Tracking;Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

CPU Oct 2018

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html

[security-announce] SUSE-SU-2016:2074-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html

openSUSE-SU-2015:2232-1: moderate: Security update for the Linux Kernel
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167358.html

[SECURITY] Fedora 23 Update: kernel-4.2.1-300.fc23
Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=74e98eb085889b0d2d4908f59f6e00026063014f

kernel/git/torvalds/linux.git - Linux kernel source tree
Patch;Vendor Advisory
http://www.ubuntu.com/usn/USN-2777-1

USN-2777-1: Linux kernel (Utopic HWE) vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html

[security-announce] SUSE-SU-2016:0386-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.securitytracker.com/id/1034453

Linux Kernel RDS Null Pointer Dereference Lets Local Users Cause Denial of Service Conditions on the Target System - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html

[security-announce] SUSE-SU-2016:0383-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-2774-1

USN-2774-1: Linux kernel (OMAP4) vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-2773-1

USN-2773-1: Linux kernel vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html

[security-announce] SUSE-SU-2016:0337-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html

[security-announce] SUSE-SU-2016:0335-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Oracle Linux Bulletin - October 2015
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html

[security-announce] SUSE-SU-2015:2339-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html

[security-announce] SUSE-SU-2016:0384-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.openwall.com/lists/oss-security/2015/09/14/3

oss-security - CVE-2015-6937 - Linux kernel - NULL pointer dereference in net/rds/connection.c
Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html

[security-announce] SUSE-SU-2016:0380-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html

[security-announce] SUSE-SU-2016:0381-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168539.html

[SECURITY] Fedora 21 Update: kernel-4.1.8-100.fc21
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html

[security-announce] SUSE-SU-2016:0387-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/76767

Linux Kernel CVE-2015-6937 Null Pointer Deference Denial of Service Vulnerability
Third Party Advisory;VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html

[security-announce] SUSE-SU-2016:0434-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html

[security-announce] SUSE-SU-2015:1727-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html

[security-announce] SUSE-SU-2016:0354-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html

[security-announce] SUSE-SU-2015:2108-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168447.html

[SECURITY] Fedora 22 Update: kernel-4.1.8-200.fc22
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html

[security-announce] SUSE-SU-2015:2350-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
https://github.com/torvalds/linux/commit/74e98eb085889b0d2d4908f59f6e00026063014f

RDS: verify the underlying transport exists before creating a connection · torvalds/linux@74e98eb · GitHub
Patch;Third Party Advisory

Jump to

Vulnerability Details : CVE-2015-6937

Products affected by CVE-2015-6937

Exploit prediction scoring system (EPSS) score for CVE-2015-6937

CVSS scores for CVE-2015-6937

References for CVE-2015-6937