Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2015-8539 | Mondoo Vulnerability Intelligence

CVE-2015-8539

HIGH7.8

The KEYS subsystem in the Linux kernel before 4

Published Feb 8, 2016

Modified 1 years ago

No fix available

Details

The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c.

References

WEBhttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=096fe9eaea40a17e125569f9e657e34cdb6d73bd ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00008.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00011.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html WEBhttp://www.openwall.com/lists/oss-security/2015/12/09/1 ADVISORYhttps://access.redhat.com/errata/RHSA-2018:0151 ADVISORYhttps://access.redhat.com/errata/RHSA-2018:0152 ADVISORYhttps://access.redhat.com/errata/RHSA-2018:0181 WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=1284450 WEBhttps://github.com/torvalds/linux/commit/096fe9eaea40a17e125569f9e657e34cdb6d73bd ADVISORYhttps://usn.ubuntu.com/3798-1/ADVISORYhttps://usn.ubuntu.com/3798-2/ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2015-8539

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedFeb 8, 2016

ModifiedAug 6, 2024