Skip to content
OpenAdvisories
Unscored CVE-2015-8539 EUVD-2015-8420GHSA-6m9m-6qjp-9mm8

The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyc…

Published Feb 8, 2016 · Updated Aug 6, 2024 · Assigned by mitre

Package: linux Ecosystem: Ubuntu

Description

The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS linux 3.13.0-161.211 USN-3798-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 7 kernel-rt +10 3.10.0-693.17.1.rt56.636.el7 RHSA-2018:0152
RHEL 7 perf +18 3.10.0-693.17.1.el7 RHSA-2018:0151
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat MRG 2 kernel-rt +10 1:3.10.0-693.17.1.rt56.604.el6rt RHSA-2018:0181

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP1 kernel-docs +1 3.12.53-60.30.2 SUSE-SU-2016:0585-1
SLES 12 SP1 kernel-xen +3 3.12.53-60.30.1 SUSE-SU-2016:0585-1
SLES 12 SP1 lttng-modules 2.7.0-3.1 SUSE-SU-2016:0585-1
SLES 12 kernel-docs 3.12.51-52.34.3 SUSE-SU-2016:0168-1
SLES 12 kernel-ec2 +5 3.12.51-52.34.1 SUSE-SU-2016:0585-1, SUSE-SU-2016:0168-1
SLES 11 SP4 kernel-docs 3.0.101-71.2 SUSE-SU-2016:0911-1
SLES 11 SP4 kernel-ec2 +7 3.0.101-71.1 SUSE-SU-2016:0911-1
SLES 11 SP3 kernel-ec2 +7 3.0.101-0.47.79.1 SUSE-SU-2016:1203-1
SLES 11 SP2 kernel-ec2 +6 3.0.101-0.7.40.1 SUSE-SU-2016:2074-1
Show 9 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP1 kernel-xen +3 3.12.53-60.30.1 SUSE-SU-2016:0585-1
SLES for SAP 12 SP1 lttng-modules 2.7.0-3.1 SUSE-SU-2016:0585-1
SLES for SAP 12 kernel-xen +3 3.12.51-52.34.1 SUSE-SU-2016:0168-1
SLES for SAP 11 SP4 kernel-ec2 +7 3.0.101-71.1 SUSE-SU-2016:0911-1
SLE Real Time 12 SP1 kernel-rt +5 3.12.61-60.18.1 SUSE-SU-2016:1937-1
SLE Real Time 11 SP4 kernel-rt +3 3.0.101.rt130-51.1 SUSE-SU-2016:1102-1
SLE Live Patching 12 kgraft-patch-SLE12-SP1_Update_0 2-5.1 SUSE-SU-2016:0335-1
SLE Live Patching 12 kgraft-patch-SLE12_Update_1 +1 5-2.1 SUSE-SU-2016:0434-1, SUSE-SU-2016:0384-1
SLE Live Patching 12 kgraft-patch-SLE12_Update_10 +1 1-2.1 SUSE-SU-2016:0585-1, SUSE-SU-2016:0168-1
SLE Live Patching 12 kgraft-patch-SLE12_Update_3 +2 4-2.1 SUSE-SU-2016:0383-1, SUSE-SU-2016:0381-1, SUSE-SU-2016:0380-1
SLE Live Patching 12 kgraft-patch-SLE12_Update_6 +1 3-2.1 SUSE-SU-2016:0387-1, SUSE-SU-2016:0386-1
SLE Live Patching 12 kgraft-patch-SLE12_Update_8 +2 2-2.1 SUSE-SU-2016:0339-1, SUSE-SU-2016:0337-1, SUSE-SU-2016:0336-1
SUSE OpenStack Cloud 5 kernel-ec2 +6 3.0.101-0.47.79.1 SUSE-SU-2016:1203-1
SUSE Manager Proxy 2.1 kernel-ec2 +6 3.0.101-0.47.79.1 SUSE-SU-2016:1203-1
SUSE Manager 2.1 kernel-ec2 +6 3.0.101-0.47.79.1 SUSE-SU-2016:1203-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed kernel-source 4.8.13-1.1 openSUSE-SU-2024:10128-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 perf +11 3.10.0-693.17.1.el7 ELSA-2018-0151

Advisories 24

References