CVE-2015-8746

 

Published at: - 02-05-2016 12:59

Last modified: - 21-09-2022 08:44

Total changes: - 2

Description

fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration recovery operations, which allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) via crafted network traffic.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.2
• https://github.com/torvalds/linux/commit/18e3b739fdc826481c6a1335ce0c5b19b3d415da
• [oss-security] 20160105 CVE request -- linux kernel: nfs: kernel panic occurs at nfs client when nfsv4.2 migration is executed-
• https://bugzilla.redhat.com/show_bug.cgi?id=1295802
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=18e3b739fdc826481c6a1335ce0c5b19b3d415da
• 1034594-
• RHSA-2016:2584-
• RHSA-2016:2574-

 

Keywords

NVD

 

CVE-2015-8746

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures