CVE-2015-6937: canonical ubuntu_linux
Modified
AliasesUBUNTU-CVE-2015-6937DEBIAN-CVE-2015-6937
Published 19-10-2015Last modified 06-08-2024
Vulnerability summary
CVE-2015-6937 is a medium (CVSS 4.9) vulnerability in canonical ubuntu_linux. EPSS estimates a 0.52% chance of exploitation in the next 30 days, higher than 44.2% of scored vulnerabilities.
Priority
Routine
Not severe (CVSS 4.9, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?CVSS score
4.9/10
010
Medium · v2.0 (NVD)EPSS score
0.52%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 26 · Related 18DLA-310-1DSA-3364-1MGASA-2016-0005MGASA-2016-0014MGASA-2016-0015MGASA-2016-0225MGASA-2016-0232MGASA-2016-0233SUSE-SU-2015:1727-1SUSE-SU-2015:2108-1SUSE-SU-2015:2339-1SUSE-SU-2015:2350-1SUSE-SU-2016:0335-1SUSE-SU-2016:0337-1SUSE-SU-2016:0354-1SUSE-SU-2016:0380-1SUSE-SU-2016:0381-1SUSE-SU-2016:0383-1SUSE-SU-2016:0384-1SUSE-SU-2016:0386-1SUSE-SU-2016:0387-1SUSE-SU-2016:0434-1SUSE-SU-2016:2074-1USN-2776-1USN-2777-1USN-2778-1
Timeline
- 19-10-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound.
CVSS metrics
1 score · 1 source · 1 versionMedium 4.9Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:N/I:N/A:CSourcesSingle source
EPSS trend
Probability
0.52%
Chance of exploitation in the next 30 days
Percentile
44%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.52% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Version check
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Ubuntu20 products
- linux< 3.13.0-66.108
- linux-azureAll versions (No fix recorded)
- linux-azure-6.11All versions (No fix recorded)
- linux-azure-fdeAll versions (No fix recorded)
- linux-azure-fde-5.15All versions (No fix recorded)
Debian2 products
- linux< 4.2.1-1
- debian_linuxEOL7.0 | 8.0
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04
Linux1 product
- linux_kernel≤ 4.2.3
4 vendors · 24 products
References
42 links- lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2015-October/168447.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-updates/2015-12/msg00039.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 42 references
- lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlX Refsource CONFIRMThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- github.com/torvalds/linux/commit/74e98eb085889b0d2d4908f59f6e00026063014fX Refsource CONFIRMPatchThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2015-September/167358.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2015-October/168539.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlX Refsource CONFIRM
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory