suse · CVE-2015-8539

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2015-8539 severity important: SUSE including 243 source package names (kernel-3.10.0-693.17.1.el7, kernel-abi-whitelists-3.10.0-693.17.1.el7, …), 662 product×package rows across 99 product lines (HPE Helion OpenStack 8, SUSE CaaS Platform 4.0, … (99 product lines)): Fixed 362, Known Not Affected 300.

Description:

The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c.