CVE-2015-8830

Description

Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec. NOTE: this vulnerability exists because of a CVE-2012-6701 regression.

7.8

CVSS

Severity: High

CVSS 3.0 •

CVSS 2.0 •

EPSS 0.04%

Vendor Advisory redhat.com Vendor Advisory ubuntu.com Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory redhat.com Vendor Advisory kernel.org Vendor Advisory github.com Vendor Advisory github.com

Affected: n/a n/a

References

Link	Tags
https://access.redhat.com/errata/RHSA-2018:3083	vendor advisory
https://github.com/torvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b	vendor advisory
http://www.ubuntu.com/usn/USN-2970-1	vendor advisory
https://access.redhat.com/errata/RHSA-2018:1854	vendor advisory
http://www.debian.org/security/2016/dsa-3503	vendor advisory
http://www.ubuntu.com/usn/USN-2969-1	vendor advisory
http://www.ubuntu.com/usn/USN-2968-1	vendor advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1314275
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4f4b82694fe48b02f7a881a1797131a6dad1364
http://www.ubuntu.com/usn/USN-2968-2	vendor advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c185ce06dca14f5cea192f5a2c981ef50663f2b	vendor advisory
http://www.openwall.com/lists/oss-security/2016/03/02/9	mailing list
https://access.redhat.com/errata/RHSA-2018:3096	vendor advisory
https://github.com/torvalds/linux/commit/c4f4b82694fe48b02f7a881a1797131a6dad1364	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2015-8830?: CVE-2015-8830 has been scored as a high severity vulnerability.
How to fix CVE-2015-8830?: To fix CVE-2015-8830, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2015-8830 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2015-8830 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.