CVE-2015-8812: canonical ubuntu_linux
Modified
AliasesUBUNTU-CVE-2015-8812DEBIAN-CVE-2015-8812
Published 27-04-2016Last modified 06-08-2024
Vulnerability summary
CVE-2015-8812 is a high (CVSS 10.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 14.55% chance of exploitation in the next 30 days, higher than 96.6% of scored vulnerabilities.
Priority
Prioritisesevere
Severe, CVSS 9.8 (NVD); no exploitation reported by the 5 checked sources; EPSS 15% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?CVSS score
10.0/10
010
High · v2.0 (NVD)EPSS score
14.55%
0%100%
Medium · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 27 · Related 23DLA-439-1DSA-3503-1RHSA-2016:2574RHSA-2016:2584SUSE-SU-2016:0785-1SUSE-SU-2016:0911-1SUSE-SU-2016:1019-1SUSE-SU-2016:1031-1SUSE-SU-2016:1032-1SUSE-SU-2016:1033-1SUSE-SU-2016:1034-1SUSE-SU-2016:1035-1SUSE-SU-2016:1037-1SUSE-SU-2016:1038-1SUSE-SU-2016:1039-1SUSE-SU-2016:1040-1SUSE-SU-2016:1041-1SUSE-SU-2016:1045-1SUSE-SU-2016:1046-1SUSE-SU-2016:1102-1SUSE-SU-2016:1203-1SUSE-SU-2016:1764-1SUSE-SU-2016:2074-1USN-2946-1USN-2947-2USN-2948-1USN-2949-1
Timeline
- 27-04-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.
CVSS metrics
5 scores · 3 sources · 3 versionsCritical 9.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Critical 9.8Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesSingle source
High 10.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
14.55%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
No change 0.00 pp
From 14.55% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Version check
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu4 products
- linux< 3.13.0-85.129
- linux-lts-utopic< 3.16.0-69.89~14.04.1
- linux-lts-vivid< 3.19.0-58.64~14.04.1
- linux-lts-wily< 4.2.0-35.40~14.04.1
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 15.10
Debian1 product
- linux< 4.4.2-1
Linux1 product
- linux_kernel< 3.2.78 | ≥ 3.3, < 3.10.99 | ≥ 3.11, < 3.12.56 | ≥ 3.13, < 3.14.63 | ≥ 3.15, < 3.16.35 | ≥ 3.17, < 3.18.31 | ≥ 3.19, < 4.1.22 | ≥ 4.2.0, < 4.4.4
Novell1 product
5 vendors · 8 products
References
48 links- lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 48 references
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=1303532X Refsource CONFIRMIssue TrackingThird Party AdvisoryREPORT
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2016/02/11/1Mailing ListX Refsource MLISTRelease NotesThird Party AdvisoryREPORT
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- github.com/torvalds/linux/commit/67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3X Refsource CONFIRMPatchVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory