CVE-2015-4036: linux linux_kernel
Vulnerability summary
CVE-2015-4036 is a high (CVSS 7.2) vulnerability in linux linux_kernel. EPSS estimates a 0.59% chance of exploitation in the next 30 days, higher than 48.2% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 4 · Related 4Timeline
- 31-08-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Array index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call. NOTE: the affected function was renamed to vhost_scsi_make_tpg before the vulnerability was announced.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.59%
Chance of exploitation in the next 30 days
Percentile
48%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.59% on 05-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (openwall.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Mageia12 products
- kernel< 3.14.43-1.mga4
- kernel-linus< 3.14.43-1.mga4
- kernel-tmb< 3.14.43-1.mga4
- kernel-userspace-headers< 3.14.43-1.mga4
- kmod-broadcom-wl< 6.30.223.141-53.mga4.nonfree
Ubuntu3 products
- linux< 3.13.0-54.91
- linux-lts-utopic< 3.16.0-34.45~14.04.1
- linux-lts-vivid< 3.19.0-20.20~14.04.1
Debian1 product
- linux< 3.16.7-ckt9-1
Linux1 product
- linux_kernel> 3.6, < 3.10.90 | ≥ 3.11, < 3.12.44 | ≥ 3.13, < 3.14.57 | ≥ 3.15, < 3.16.35 | ≥ 3.17, < 3.18.25 | ≥ 3.19, < 4.0 | 3.6 | 3.6:rc2 | 3.6:rc3 | 3.6:rc4 | 3.6:rc5 | 3.6:rc6 | 3.6:rc7
4 vendors · 17 products
References
27 links- lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- www.openwall.com/lists/oss-security/2015/05/13/4Mailing ListX Refsource MLISTExploitThird Party AdvisoryREPORT
- github.com/torvalds/linux/commit/59c816c1f24df0204e01851431d3bab3eb76719cX Refsource CONFIRMThird Party Advisory
