CVE-2015-8543: linux linux_kernel
Vulnerability summary
CVE-2015-8543 is a high (CVSS 7.0) vulnerability in linux linux_kernel. EPSS estimates a 1.22% chance of exploitation in the next 30 days, higher than 68.7% of scored vulnerabilities.
Not severe (CVSS 7, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 18 · Related 11Timeline
- 28-12-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application.
CVSS metrics
5 scores · 3 sources · 3 versions- OSV · UbuntuEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
1.22%
Chance of exploitation in the next 30 days
Percentile
69%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.22% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu21 products
- linux< 3.13.0-79.123
- linux-azureAll versions (No fix recorded)
- linux-azure-6.11All versions (No fix recorded)
- linux-azure-fdeAll versions (No fix recorded)
- linux-azure-fde-5.15All versions (No fix recorded)
Debian1 product
- linux< 4.3.3-1
Linux1 product
- linux_kernel< 3.2.75 | ≥ 3.3, < 3.4.111 | ≥ 3.5, < 3.10.95 | ≥ 3.11, < 3.12.52 | ≥ 3.13, < 3.14.59 | ≥ 3.15, < 3.16.35 | ≥ 3.17, < 3.18.26 | ≥ 3.19, < 4.1.16 | ≥ 4.2, < 4.3.4
Mageia1 product
- ctdb< 2.5.3-3.1.mga5
4 vendors · 24 products
References
37 links- www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlX Refsource CONFIRMThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 37 references
- github.com/torvalds/linux/commit/79462ad02e861803b3840cc782248c7359451cd9X Refsource CONFIRMVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory