CVE-2015-6937: Null Pointer Dereference
It was found that the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation did not verify that an underlying transport exists when creating a connection to a remote server.
This could happen on sockets that were not properly bound before attempting to send a message.
A local attacker could use this flaw to crash the system by creating sockets at specific times to trigger a NULL pointer dereference on the system.
Upstream patch:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=74e98eb085889b0d2d4908f59f6e00026063014f
CVE assignment:
http://seclists.org/oss-sec/2015/q3/545
Other sources
The rdsconncreate function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.133-1Fixed in 6.12.22-1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 3.13.0-66.108 - Upgrade
Upgrade
ubuntu/linux-lts-utopicto a version that resolves this vulnerability.Fixed in 3.16.0-51.69~14.04.1 - Upgrade
Upgrade
ubuntu/linux-lts-vividto a version that resolves this vulnerability.Fixed in 3.19.0-31.36~14.04.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 74e98eb085889b0d2d4908f59f6e00026063014f
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2015-6937.
What is the severity of CVE-2015-6937?
CVE-2015-6937 has a medium severity rating.
How does CVE-2015-6937 impact the Linux kernel?
CVE-2015-6937 allows local users to cause a denial of service or possibly have other unspecified impact by using a socket that was not properly bound.
Which software versions are affected by CVE-2015-6937?
The Linux kernel versions through 4.2.3 are affected.
How can I fix CVE-2015-6937?
Update your Linux kernel to version 4.3 or higher.