CVE-2015-8812

CRITICAL

9.8

CVSS Score

Published: April 27, 2016 at 05:00 PM UTC

Updated: June 17, 2026 at 12:35 AM UTC

3 products affected across 3 vendorsLinux KernelUbuntu LinuxSUSE Linux Enterprise Real Time Extension

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.8

Exploit prediction

EPSS 15%

Description

drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

12.04 14.04 15.10

Linux Kernel · Linux

95%

v < 3.2.783.11 ≤ v < 3.12.563.13 ≤ v < 3.14.633.15 ≤ v < 3.16.353.17 ≤ v < 3.18.313.19 ≤ v < 4.1.223.3 ≤ v < 3.10.994.2.0 ≤ v < 4.4.4

Affected range stops below 3.10.99, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.12.56, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.14.63, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.16.35, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.18.31, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.2.78, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.1.22, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.4.4, so it looks safe — our inference, not a vendor statement

SUSE Linux Enterprise Real Time Extension · Novell

95%

12 sp1

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references