USN-2823-1
Advisory lineage Upstream: 4 Downstream: 0
Published: 01 Dec 2015, 20:37
Last modified:22 Apr 2026, 09:19
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
01 Dec 2015, 20:37
Published
Vulnerability first disclosed
22 Apr 2026, 09:19
Last Modified
Vulnerability information updated
Description
linux vulnerabilities It was discovered that the SCTP protocol implementation in the Linux kernel performed an incorrect sequence of protocol-initialization steps. A local attacker could use this to cause a denial of service (system crash). (CVE-2015-5283) Dmitry Vyukov discovered that the Linux kernel's keyring handler attempted to garbage collect incompletely instantiated keys. A local unprivileged attacker could use this to cause a denial of service (system crash). (CVE-2015-7872)
Affected Systems
- ubuntu•linux
< 3.13.0-71.114