USN-2829-2

Advisory lineage Upstream: 4 Downstream: 0
Published: 04 Dec 2015, 18:21
Last modified:04 Feb 2026, 02:16

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

04 Dec 2015, 18:21
Published
Vulnerability first disclosed
04 Feb 2026, 02:16
Last Modified
Vulnerability information updated

Description

linux-lts-vivid vulnerabilities It was discovered that the SCTP protocol implementation in the Linux kernel performed an incorrect sequence of protocol-initialization steps. A local attacker could use this to cause a denial of service (system crash). (CVE-2015-5283) Dmitry Vyukov discovered that the Linux kernel's keyring handler attempted to garbage collect incompletely instantiated keys. A local unprivileged attacker could use this to cause a denial of service (system crash). (CVE-2015-7872)

Affected Systems

  • ubuntulinux-lts-vivid

    < 3.19.0-39.44~14.04.1

References (3)