CVE-2015-6252
published 2015-10-19CVE-2015-6252: The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows local users to cause a denial of service (memory consumption) via…
PriorityP48low2.1CVSS 2.0
AVLACLAuNCNINAP
EPSS
0.44%
36.7th percentile
The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows local users to cause a denial of service (memory consumption) via a VHOST_SET_LOG_FD ioctl call that triggers permanent file-descriptor allocation.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 4.1.5-1 (bookworm) | linux 4.1.5-1 (bookworm) |
| linux | linux_kernel | <= 4.1.4 | — |
| linux | linux_kernel | >= 0 < 4.1.5-1 | 4.1.5-1 |
| linux | linux_kernel | >= 0 < 4.1.5-1 | 4.1.5-1 |
| linux | linux_kernel | >= 0 < 4.1.5-1 | 4.1.5-1 |
| linux | linux_kernel | >= 0 < 4.1.5-1 | 4.1.5-1 |
| linux | linux_kernel | >= 0 < 3.13.0-65.105 | 3.13.0-65.105 |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
osv6.1MEDIUM
vendor_ubuntu6.1MEDIUM
vendor_debian2.1LOW
vendor_redhat2.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel (Utopic HWE) vulnerabilities
vendor_ubuntu·2015-10-20·CVSS 6.1
CVE-2015-5156 [MEDIUM] Linux kernel (Utopic HWE) vulnerabilities
Title: Linux kernel (Utopic HWE) vulnerabilities
Summary: Several security issues were fixed in the kernel.
It was discovered that virtio networking in the Linux kernel did not handle
fragments correctly, leading to kernel memory corruption. A remote attacker
could use this to cause a denial of service (system crash) or possibly
execute code with administrative privileges. (CVE-2015-5156)
Benjamin Randazzo discovered an information leak in the md (multiple
device) driver when the bitmap_info.file is disabled. A local privileged
attacker could use this to obtain sensitive information from the kernel.
(CVE-2015-5697)
Marc-André Lureau discovered that the vhost driver did not properly
release the userspace provided log file descriptor. A privileged attacker
could use this to cause a denia
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2015-10-01·CVSS 4.6
CVE-2015-5707 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the kernel.
It was discovered that an integer overflow error existed in the SCSI
generic (sg) driver in the Linux kernel. A local attacker with write
permission to a SCSI generic device could use this to cause a denial of
service (system crash) or potentially escalate their privileges.
(CVE-2015-5707)
Marc-André Lureau discovered that the vhost driver did not properly
release the userspace provided log file descriptor. A privileged attacker
could use this to cause a denial of service (resource exhaustion).
(CVE-2015-6252)
It was discovered that the Linux kernel's perf subsystem did not bound
callchain backtraces on PowerPC 64. A local attacker could use this to
cause a denial of service. (CVE-2015-6526)
Ubuntu
Linux kernel (OMAP4) vulnerabilities
vendor_ubuntu·2015-10-01·CVSS 4.6
CVE-2015-5707 [MEDIUM] Linux kernel (OMAP4) vulnerabilities
Title: Linux kernel (OMAP4) vulnerabilities
Summary: Several security issues were fixed in the kernel.
It was discovered that an integer overflow error existed in the SCSI
generic (sg) driver in the Linux kernel. A local attacker with write
permission to a SCSI generic device could use this to cause a denial of
service (system crash) or potentially escalate their privileges.
(CVE-2015-5707)
Marc-André Lureau discovered that the vhost driver did not properly
release the userspace provided log file descriptor. A privileged attacker
could use this to cause a denial of service (resource exhaustion).
(CVE-2015-6252)
It was discovered that the Linux kernel's perf subsystem did not bound
callchain backtraces on PowerPC 64. A local attacker could use this to
cause a denial of service. (CVE-201
Ubuntu
Linux kernel (Trusty HWE) vulnerabilities
vendor_ubuntu·2015-09-29·CVSS 2.1
CVE-2015-5697 [LOW] Linux kernel (Trusty HWE) vulnerabilities
Title: Linux kernel (Trusty HWE) vulnerabilities
Summary: Several security issues were fixed in the kernel.
Benjamin Randazzo discovered an information leak in the md (multiple
device) driver when the bitmap_info.file is disabled. A local privileged
attacker could use this to obtain sensitive information from the kernel.
(CVE-2015-5697)
Marc-André Lureau discovered that the vhost driver did not properly
release the userspace provided log file descriptor. A privileged attacker
could use this to cause a denial of service (resource exhaustion).
(CVE-2015-6252)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires yo
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2015-09-29·CVSS 2.1
CVE-2015-5697 [LOW] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the kernel.
Benjamin Randazzo discovered an information leak in the md (multiple
device) driver when the bitmap_info.file is disabled. A local privileged
attacker could use this to obtain sensitive information from the kernel.
(CVE-2015-5697)
Marc-André Lureau discovered that the vhost driver did not properly
release the userspace provided log file descriptor. A privileged attacker
could use this to cause a denial of service (resource exhaustion).
(CVE-2015-6252)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompil
Ubuntu
Linux kernel (Vivid HWE) vulnerabilities
vendor_ubuntu·2015-09-29·CVSS 2.1
CVE-2015-5697 [LOW] Linux kernel (Vivid HWE) vulnerabilities
Title: Linux kernel (Vivid HWE) vulnerabilities
Summary: Several security issues were fixed in the kernel.
Benjamin Randazzo discovered an information leak in the md (multiple
device) driver when the bitmap_info.file is disabled. A local privileged
attacker could use this to obtain sensitive information from the kernel.
(CVE-2015-5697)
Marc-André Lureau discovered that the vhost driver did not properly
release the userspace provided log file descriptor. A privileged attacker
could use this to cause a denial of service (resource exhaustion).
(CVE-2015-6252)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you
Red Hat
kernel: vhost fd leak in ioctl VHOST_SET_LOG_FD
vendor_redhat·2015-08-10·CVSS 2.1
CVE-2015-6252 [LOW] CWE-665 kernel: vhost fd leak in ioctl VHOST_SET_LOG_FD
kernel: vhost fd leak in ioctl VHOST_SET_LOG_FD
The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows local users to cause a denial of service (memory consumption) via a VHOST_SET_LOG_FD ioctl call that triggers permanent file-descriptor allocation.
A flaw was found in the way the Linux kernel's vhost driver treated userspace provided log file descriptor when processing the VHOST_SET_LOG_FD ioctl command. The file descriptor was never released and continued to consume kernel memory. A privileged local user with access to the /dev/vhost-net files could use this flaw to create a denial-of-service attack.
Statement: This issue does not affect the Linux kernels as shipped with Red Hat Enterprise Linux 5.
This issue has been rated as having Low impact,
Debian
CVE-2015-6252: linux - The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before...
vendor_debian·2015·CVSS 2.1
CVE-2015-6252 [LOW] CVE-2015-6252: linux - The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before...
The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows local users to cause a denial of service (memory consumption) via a VHOST_SET_LOG_FD ioctl call that triggers permanent file-descriptor allocation.
Scope: local
bookworm: resolved (fixed in 4.1.5-1)
bullseye: resolved (fixed in 4.1.5-1)
forky: resolved (fixed in 4.1.5-1)
sid: resolved (fixed in 4.1.5-1)
trixie: resolved (fixed in 4.1.5-1)
GHSA
GHSA-4j4g-qvh2-m3wx: The vhost_dev_ioctl function in drivers/vhost/vhost
ghsa_unreviewed·2022-05-17
CVE-2015-6252 [LOW] GHSA-4j4g-qvh2-m3wx: The vhost_dev_ioctl function in drivers/vhost/vhost
The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows local users to cause a denial of service (memory consumption) via a VHOST_SET_LOG_FD ioctl call that triggers permanent file-descriptor allocation.
OSV
linux-lts-utopic vulnerabilities
osv·2015-10-20·CVSS 6.1
CVE-2015-5156 [MEDIUM] linux-lts-utopic vulnerabilities
linux-lts-utopic vulnerabilities
It was discovered that virtio networking in the Linux kernel did not handle
fragments correctly, leading to kernel memory corruption. A remote attacker
could use this to cause a denial of service (system crash) or possibly
execute code with administrative privileges. (CVE-2015-5156)
Benjamin Randazzo discovered an information leak in the md (multiple
device) driver when the bitmap_info.file is disabled. A local privileged
attacker could use this to obtain sensitive information from the kernel.
(CVE-2015-5697)
Marc-André Lureau discovered that the vhost driver did not properly
release the userspace provided log file descriptor. A privileged attacker
could use this to cause a denial of service (resource exhaustion).
(CVE-2015-6252)
It was discovered that
OSV
CVE-2015-6252: The vhost_dev_ioctl function in drivers/vhost/vhost
osv·2015-10-19·CVSS 2.1
CVE-2015-6252 [LOW] CVE-2015-6252: The vhost_dev_ioctl function in drivers/vhost/vhost
The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows local users to cause a denial of service (memory consumption) via a VHOST_SET_LOG_FD ioctl call that triggers permanent file-descriptor allocation.
OSV
linux-lts-vivid vulnerabilities
osv·2015-09-29·CVSS 2.1
CVE-2015-5697 [LOW] linux-lts-vivid vulnerabilities
linux-lts-vivid vulnerabilities
Benjamin Randazzo discovered an information leak in the md (multiple
device) driver when the bitmap_info.file is disabled. A local privileged
attacker could use this to obtain sensitive information from the kernel.
(CVE-2015-5697)
Marc-André Lureau discovered that the vhost driver did not properly
release the userspace provided log file descriptor. A privileged attacker
could use this to cause a denial of service (resource exhaustion).
(CVE-2015-6252)
OSV
linux vulnerabilities
osv·2015-09-28·CVSS 2.1
CVE-2015-5697 [LOW] linux vulnerabilities
linux vulnerabilities
Benjamin Randazzo discovered an information leak in the md (multiple
device) driver when the bitmap_info.file is disabled. A local privileged
attacker could use this to obtain sensitive information from the kernel.
(CVE-2015-5697)
Marc-André Lureau discovered that the vhost driver did not properly
release the userspace provided log file descriptor. A privileged attacker
could use this to cause a denial of service (resource exhaustion).
(CVE-2015-6252)
No detection rules found.
No public exploits indexed.
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7932c0bd7740f4cd2aa168d3ce0199e7af7d72d5http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.htmlhttp://www.debian.org/security/2015/dsa-3364http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.5http://www.openwall.com/lists/oss-security/2015/08/18/3http://www.securityfocus.com/bid/76400http://www.securitytracker.com/id/1033666http://www.ubuntu.com/usn/USN-2748-1http://www.ubuntu.com/usn/USN-2749-1http://www.ubuntu.com/usn/USN-2751-1http://www.ubuntu.com/usn/USN-2752-1http://www.ubuntu.com/usn/USN-2759-1http://www.ubuntu.com/usn/USN-2760-1http://www.ubuntu.com/usn/USN-2777-1https://bugzilla.redhat.com/show_bug.cgi?id=1251839https://github.com/torvalds/linux/commit/7932c0bd7740f4cd2aa168d3ce0199e7af7d72d5http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7932c0bd7740f4cd2aa168d3ce0199e7af7d72d5http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.htmlhttp://www.debian.org/security/2015/dsa-3364http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.5http://www.openwall.com/lists/oss-security/2015/08/18/3http://www.securityfocus.com/bid/76400http://www.securitytracker.com/id/1033666http://www.ubuntu.com/usn/USN-2748-1http://www.ubuntu.com/usn/USN-2749-1http://www.ubuntu.com/usn/USN-2751-1http://www.ubuntu.com/usn/USN-2752-1http://www.ubuntu.com/usn/USN-2759-1http://www.ubuntu.com/usn/USN-2760-1http://www.ubuntu.com/usn/USN-2777-1https://bugzilla.redhat.com/show_bug.cgi?id=1251839https://github.com/torvalds/linux/commit/7932c0bd7740f4cd2aa168d3ce0199e7af7d72d5
2015-10-19
Published