{"id":"CVE-2015-5257","aliases":["BELL-CVE-2015-5257","DEBIAN-CVE-2015-5257","DLA-325-1","DSA-3372-1","EUVD-2015-5245","GHSA-v3mg-r9jg-vfg4","MGASA-2015-0435","MGASA-2015-0439","MGASA-2016-0015","MGASA-2016-0225","MGASA-2016-0232","MGASA-2016-0233","UBUNTU-CVE-2015-5257","USN-2794-1","USN-2797-1","USN-2798-1"],"status":"published","title":"drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate...","description":"drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted USB device.  NOTE: this ID was incorrectly used for an Apache Cordova issue that has the correct ID of CVE-2015-8320.","severity":{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00428,"percentile":0.37314,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2015-09-24T00:00:00Z","modified":"2026-10-28T08:17:11Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.2.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.2.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.2.1-1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kernel","fixed_in":["4.1.12-1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kernel-userspace-headers","fixed_in":["4.1.12-1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kmod-vboxadditions","fixed_in":["5.0.8-2.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kmod-virtualbox","fixed_in":["5.0.8-2.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kmod-xtables-addons","fixed_in":["2.7-5.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kmod-broadcom-wl","fixed_in":["6.30.223.271-2.mga5.nonfree"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kmod-fglrx","fixed_in":["15.200.1046-6.mga5.nonfree"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kmod-nvidia304","fixed_in":["304.128-2.mga5.nonfree"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kmod-nvidia340","fixed_in":["340.93-2.mga5.nonfree"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kmod-nvidia-current","fixed_in":["346.96-2.mga5.nonfree"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kernel-firmware-nonfree","fixed_in":["20151018-1.mga5.nonfree"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kernel-linus","fixed_in":["4.1.12-1.mga5"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-67.110"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","fixed_in":["3.16.0-52.71~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","fixed_in":["3.19.0-32.37~14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"linux-2.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-48squeeze16"}]}],"versions":["2.6.32-30","2.6.32-30+m68k.5","2.6.32-31","2.6.32-31~bpo50+1","2.6.32-32","2.6.32-33","2.6.32-34","2.6.32-34squeeze1","2.6.32-35","2.6.32-35squeeze1","2.6.32-35squeeze2","2.6.32-35~bpo50+1","2.6.32-36","2.6.32-37","2.6.32-38","2.6.32-39","2.6.32-39squeeze1","2.6.32-40","2.6.32-41","2.6.32-41squeeze2","2.6.32-42","2.6.32-43","2.6.32-44","2.6.32-45","2.6.32-46","2.6.32-46squeeze1","2.6.32-47","2.6.32-48","2.6.32-48squeeze1","2.6.32-48squeeze10","2.6.32-48squeeze11","2.6.32-48squeeze12","2.6.32-48squeeze13","2.6.32-48squeeze14","2.6.32-48squeeze3","2.6.32-48squeeze4","2.6.32-48squeeze5","2.6.32-48squeeze6","2.6.32-48squeeze7","2.6.32-48squeeze8","2.6.32-48squeeze9"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.68-1+deb7u5"}]}],"versions":["3.2.41-2","3.2.41-2+deb7u1","3.2.41-2+deb7u2","3.2.41-2+deb7u2~bpo60+1","3.2.46-1","3.2.46-1+deb7u1","3.2.46-1+deb7u1~bpo60+1","3.2.46-1~bpo60+1","3.2.51-1","3.2.51-1~bpo60+1","3.2.53-1","3.2.53-2","3.2.54-1","3.2.54-2","3.2.54-2~bpo60+1","3.2.57-1","3.2.57-2","3.2.57-3","3.2.57-3+deb7u1","3.2.57-3+deb7u2","3.2.57-3+deb7u2~bpo60+1","3.2.60-1","3.2.60-1+deb7u1","3.2.60-1+deb7u2","3.2.60-1+deb7u3","3.2.60-1+deb7u3~bpo60+1","3.2.63-1","3.2.63-2","3.2.63-2+deb7u1","3.2.63-2+deb7u1~bpo60+1","3.2.63-2+deb7u2","3.2.63-2+deb7u2~bpo60+1","3.2.65-1","3.2.65-1+deb7u1","3.2.65-1+deb7u1~bpo60+1","3.2.65-1+deb7u2","3.2.65-1+deb7u2~bpo60+1","3.2.68-1","3.2.68-1+deb7u1","3.2.68-1+deb7u1~bpo60+1","3.2.68-1+deb7u2","3.2.68-1+deb7u2~bpo60+1","3.2.68-1+deb7u3","3.2.68-1+deb7u3~bpo60+1","3.2.68-1+deb7u4","3.2.68-1+deb7u4~bpo60+1"],"bundled":2},{"source":"osv","ecosystem":"Debian:8","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt11-1+deb8u5"}]}],"versions":["3.16.7-ckt11-1","3.16.7-ckt11-1+deb8u1","3.16.7-ckt11-1+deb8u2","3.16.7-ckt11-1+deb8u2~bpo70+1","3.16.7-ckt11-1+deb8u3","3.16.7-ckt11-1+deb8u3~bpo70+1","3.16.7-ckt11-1+deb8u4","3.16.7-ckt11-1+deb8u4~bpo70+1","3.16.7-ckt11-1~bpo70+1","3.16.7-ckt9-2","3.16.7-ckt9-3","3.16.7-ckt9-3~deb8u1","3.16.7-ckt9-3~deb8u1~bpo70+1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:5","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.12-1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-userspace-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.12-1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-vboxadditions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.8-2.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.8-2.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-5.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-broadcom-wl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.30.223.271-2.mga5.nonfree"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-fglrx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.200.1046-6.mga5.nonfree"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-nvidia304","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"304.128-2.mga5.nonfree"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-nvidia340","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"340.93-2.mga5.nonfree"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-nvidia-current","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"346.96-2.mga5.nonfree"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-firmware-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20151018-1.mga5.nonfree"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.12-1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-tmb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.15-1.mga5"}]}],"bundled":22},{"source":"osv","ecosystem":"Mageia:5","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"038-21.mga5"}]}],"bundled":18},{"source":"osv","ecosystem":"Mageia:5","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-1.mga5"}]}],"bundled":18},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-userspace-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-1.mga5"}]}],"bundled":18},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-vboxadditions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.16-6.mga5"}]}],"bundled":18},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.16-6.mga5"}]}],"bundled":18},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-7.mga5"}]}],"bundled":18},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-1.mga5"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-tmb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-1.mga5"}]}],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-67.110"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-52.71~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1","3.16.0-36.48~14.04.1","3.16.0-37.49~14.04.1","3.16.0-37.51~14.04.1","3.16.0-38.52~14.04.1","3.16.0-39.53~14.04.1","3.16.0-40.54~14.04.1","3.16.0-41.55~14.04.1","3.16.0-41.57~14.04.1","3.16.0-43.58~14.04.1","3.16.0-44.59~14.04.1","3.16.0-45.60~14.04.1","3.16.0-46.62~14.04.1","3.16.0-48.64~14.04.1","3.16.0-49.65~14.04.1","3.16.0-50.66~14.04.1","3.16.0-50.67~14.04.1","3.16.0-51.69~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-32.37~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1","3.19.0-28.30~14.04.1","3.19.0-30.33~14.04.1","3.19.0-30.34~14.04.1","3.19.0-31.36~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-15.16~18.04.1","5.0.0-16.17~18.04.1","5.0.0-17.18~18.04.1","5.0.0-19.20~18.04.1","5.0.0-20.21~18.04.1","5.3.0-19.20~18.04.2","5.3.0-22.24~18.04.1","5.3.0-23.25~18.04.1","5.3.0-23.25~18.04.2","5.3.0-24.26~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-fde-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1019.24~20.04.1.1","5.15.0-1020.25~20.04.1.1","5.15.0-1021.26~20.04.1.1","5.15.0-1029.36~20.04.1.1","5.15.0-1030.37~20.04.1.1","5.15.0-1031.38~20.04.1.1","5.15.0-1033.40~20.04.1.1","5.15.0-1034.41~20.04.1.2","5.15.0-1035.42~20.04.1.1","5.15.0-1036.43~20.04.1.1","5.15.0-1037.44~20.04.1.1","5.15.0-1038.45~20.04.1.1","5.15.0-1039.46~20.04.1.1","5.15.0-1040.47~20.04.1.1","5.15.0-1041.48~20.04.1.1","5.15.0-1042.49~20.04.1.1","5.15.0-1043.50~20.04.1.1","5.15.0-1046.53~20.04.1.1","5.15.0-1047.54~20.04.1.1","5.15.0-1049.56~20.04.1.1","5.15.0-1050.57~20.04.1.1","5.15.0-1051.59~20.04.1.1","5.15.0-1052.60~20.04.1.1","5.15.0-1053.61~20.04.1.1","5.15.0-1054.62~20.04.1.1","5.15.0-1056.64~20.04.1.1","5.15.0-1057.65~20.04.1.1","5.15.0-1058.66~20.04.2.1","5.15.0-1059.67~20.04.1.1","5.15.0-1060.69~20.04.1.1","5.15.0-1061.70~20.04.1.1","5.15.0-1063.72~20.04.1.1","5.15.0-1064.73~20.04.1.1","5.15.0-1065.74~20.04.1.1","5.15.0-1067.76~20.04.1.1","5.15.0-1068.77~20.04.1.1","5.15.0-1070.79~20.04.1.1","5.15.0-1071.80~20.04.1.1","5.15.0-1072.81~20.04.1.1","5.15.0-1073.82~20.04.1.1","5.15.0-1074.83~20.04.1.1","5.15.0-1076.85~20.04.1.1","5.15.0-1078.87~20.04.1.1","5.15.0-1081.90~20.04.1.1","5.15.0-1082.91~20.04.1.1","5.15.0-1086.95~20.04.1.1","5.15.0-1087.96~20.04.1.1","5.15.0-1088.97~20.04.1.1","5.15.0-1089.98~20.04.1.1","5.15.0-1091.100~20.04.1.1","5.15.0-1094.103~20.04.1.1","5.15.0-1096.105~20.04.1.1","5.15.0-1097.106~20.04.1.1","5.15.0-1098.107~20.04.1.1","5.15.0-1102.111~20.04.1.1","5.15.0-1103.112~20.04.1.1","5.15.0-1111.120~20.04.1.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.2","5.15.0-1118.127~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1120.129~20.04.1","5.15.0-1121.130~20.04.1","5.15.0-1122.131~20.04.1","5.15.0-1124.133~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1008.9","5.4.0-1009.10","5.4.0-1010.11","5.4.0-1011.12","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1016.17","5.4.0-1018.19","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1027.28","5.4.0-1029.30","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1043.44","5.4.0-1046.48","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1073.77","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1083.87","5.4.0-1084.88","5.4.0-1085.89","5.4.0-1086.90","5.4.0-1087.91","5.4.0-1088.92","5.4.0-1089.93","5.4.0-1090.94","5.4.0-1091.95","5.4.0-1092.96","5.4.0-1093.97","5.4.0-1094.98","5.4.0-1095.99","5.4.0-1096.100","5.4.0-1097.101","5.4.0-1098.102","5.4.0-1099.103","5.4.0-1100.104","5.4.0-1101.105","5.4.0-1102.106"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1008.8~24.04.1","6.11.0-1012.12~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1017.17~24.04.1","6.11.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1006.6~24.04.2","6.11.0-1011.11~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1016.16~24.04.1","6.11.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-17.17~24.04.2","6.11.0-19.19~24.04.1","6.11.0-21.21~24.04.1","6.11.0-24.24~24.04.1","6.11.0-25.25~24.04.1","6.11.0-26.26~24.04.1","6.11.0-28.28~24.04.1","6.11.0-29.29~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1009.10~24.04.1","6.11.0-1011.12~24.04.1","6.11.0-1012.13~24.04.1","6.11.0-1013.14~24.04.1","6.11.0-1014.15~24.04.1","6.11.0-1015.16~24.04.2","6.11.0-1016.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.1-1015.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-9.9.1","6.8.0-20.20.1","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-47.47.1","6.8.0-48.48.1","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-67.110"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-52.71~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1","3.16.0-36.48~14.04.1","3.16.0-37.49~14.04.1","3.16.0-37.51~14.04.1","3.16.0-38.52~14.04.1","3.16.0-39.53~14.04.1","3.16.0-40.54~14.04.1","3.16.0-41.55~14.04.1","3.16.0-41.57~14.04.1","3.16.0-43.58~14.04.1","3.16.0-44.59~14.04.1","3.16.0-45.60~14.04.1","3.16.0-46.62~14.04.1","3.16.0-48.64~14.04.1","3.16.0-49.65~14.04.1","3.16.0-50.66~14.04.1","3.16.0-50.67~14.04.1","3.16.0-51.69~14.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-32.37~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1","3.19.0-28.30~14.04.1","3.19.0-30.33~14.04.1","3.19.0-30.34~14.04.1","3.19.0-31.36~14.04.1"],"bundled":2}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.debian.org/security/2015/dsa-3372","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/76834","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2792-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cbb4be652d374f64661137756b8f357a1827d6a4","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2794-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2799-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2795-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265607","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://github.com/torvalds/linux/commit/cbb4be652d374f64661137756b8f357a1827d6a4","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.4","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2015/09/23/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2798-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5257"},{"url":"https://github.com/advisories/GHSA-v3mg-r9jg-vfg4"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2015-5257","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-5257","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0435.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17067","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16915","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17010","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17034","tags":["report"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.9","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.10","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.11","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.12","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2015-0439.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17066","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2016-0015.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17401","tags":["report"]},{"url":"http://kernelnewbies.org/Linux_4.0","tags":["web"]},{"url":"http://kernelnewbies.org/Linux_4.1","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.1","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.2","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.3","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.5","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.7","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.8","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.9","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.10","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.11","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.12","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.13","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.14","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.15","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2016-0225.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18688","tags":["report"]},{"url":"http://kernelnewbies.org/Linux_4.2","tags":["web"]},{"url":"http://kernelnewbies.org/Linux_4.3","tags":["web"]},{"url":"http://kernelnewbies.org/Linux_4.4","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.2","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.3","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.4","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.5","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.6","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.7","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.8","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.9","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.10","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.11","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.12","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.13","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2016-0232.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18374","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2016-0233.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-5257","tags":["report"]},{"url":"https://marc.info/?l=linux-usb\u0026m=144303376328355","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2794-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2792-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2795-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2799-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2796-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2798-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2797-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5257","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-5283","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-5257","description":"drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted USB device.  NOTE: this ID was incorrectly used for an Apache Cordova issue that has the correct ID of CVE-2015-8320.","status":"published","published":"2015-11-16T11:00:00Z","modified":"2024-08-06T06:41:08.906Z","updated_at":"2026-11-02T14:35:39.846011Z"}],"euvd":[{"id":"EUVD-2015-5245","description":"drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted USB device.  NOTE: this ID was incorrectly used for an Apache Cordova issue that has the correct ID of CVE-2015-8320.","status":"published","published":"2015-11-16T11:00:00Z","modified":"2024-08-06T06:41:08Z","updated_at":"2026-11-03T02:22:00.863884Z"}],"ghsa":[{"id":"GHSA-v3mg-r9jg-vfg4","title":"drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate...","description":"drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted USB device.  NOTE: this ID was incorrectly used for an Apache Cordova issue that has the correct ID of CVE-2015-8320.","status":"published","published":"2022-05-17T03:27:19Z","modified":"2023-01-27T05:08:20Z","updated_at":"2026-11-02T14:43:17.252355Z"}],"nvd":[{"id":"CVE-2015-5257","description":"drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted USB device.  NOTE: this ID was incorrectly used for an Apache Cordova issue that has the correct ID of CVE-2015-8320.","status":"published","published":"2015-11-16T11:59:03.43Z","modified":"2026-06-17T00:28:46.257Z","cvss":[{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:12.30866Z"}],"osv":[{"id":"BELL-CVE-2015-5257","title":"CVE-2015-5257 does not affect BellSoft software","status":"withdrawn","published":"2015-11-16T11:59:00Z","modified":"2026-01-28T07:20:48.124442Z","cvss":[{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2015-5257","description":"drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted USB device.  NOTE: this ID was incorrectly used for an Apache Cordova issue that has the correct ID of CVE-2015-8320.","status":"published","published":"2015-11-16T11:59:03Z","modified":"2026-04-16T06:22:42.915141437Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-5257","description":"drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted USB device.  NOTE: this ID was incorrectly used for an Apache Cordova issue that has the correct ID of CVE-2015-8320.","status":"published","published":"2015-11-16T11:59:03.43Z","modified":"2026-09-09T06:47:21.001382242Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"DLA-325-1","title":"linux-2.6 - security update","status":"published","published":"2015-10-12T00:00:00Z","modified":"2026-03-09T01:19:51.817527Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-3372-1","title":"linux - security update","status":"published","published":"2015-10-13T00:00:00Z","modified":"2026-03-09T01:20:39.474064Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2015-0435","title":"Updated kernel packages fixes security vulnerability","description":"This kernel update is based on the upstream 4.1.12 longterm kernel and\nfixes at least the following security issue:\n\nMoein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained\nhardcoded attributes about the USB devices. An attacker could construct a\nfake WhiteHEAT USB device that, when inserted, causes a denial of service\n(system crash) (CVE-2015-5257).\n\nIt also fixes various upstream bugs, for more info see the referenced\nchangelogs.\n\nOther fixes in this update:\n* improve ath10k (QCA99X0, QCA988X, QCA6174) support (mga#16915)\n* silence a harmless warning on 32bit non-dt hardware (mga#17010)\n* fix regression with AlpsPS/2 ALPS DualPoint TouchPad of a Dell\n  Latitude D600 (mga#17034)\n* kernel-firmware-nonfee:\n  - Add firmware for mwlwifi\n  - add firmware for QCA99X0 hw2.0, QCA988X hw2.0, QCA6174 hw2.1/3.0 (ath10k)\n  - brcmfmac: firmware refresh for BCM43602 PCIE devices\n* iwlwifi-agn-ucode:\n  - Add firmware for Intel Bluetooth 7265 (D1)\n  - Update firmware for Intel Bluetooth 7265 (C0/D0)\n  - Update firmware for Intel Bluetooth 7260 (B3/B4/B5/B6)\n","status":"published","published":"2015-11-07T20:11:27Z","modified":"2026-04-16T06:24:36.055799494Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2015-0439","title":"Updated kernel-linus packages fixes security vulnerability","description":"This update of kernel-linus provides the upstream 4.1.12 longterm kernel\nand fixes at least the following security issue:\n\nMoein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained\nhardcoded attributes about the USB devices. An attacker could construct a\nfake WhiteHEAT USB device that, when inserted, causes a denial of service\n(system crash) (CVE-2015-5257).\n\nIt also fixes various upstream bugs, for more info see the referenced\nchangelogs:\n","status":"published","published":"2015-11-10T18:41:41Z","modified":"2026-04-16T06:25:46.420217259Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2016-0015","title":"Updated kernel-tmb packages provides 4.1 longterm kernel and fixes security issues","description":"This kernel-tmb update provides an upgrade to the upstream 4.1 longterm\nkernel series, currently based on 4.1.15 and resolves at least the\nfollowing security issues:\n\nIt was found that the Linux kernel's keyring implementation would leak\nmemory when adding a key to a keyring via the add_key() function. A\nlocal attacker could use this flaw to exhaust all available memory on\nthe system. (CVE-2015-1333)\n\nA flaw was found in the Linux kernel where the deletion of a file or\ndirectory could trigger an unmount and reveal data under a mount point.\nThis flaw was inadvertently introduced with the new feature of being able\nto lazily unmount a mount tree when using file system user namespaces.\n(CVE-2015-4176)\n\nA flaw was discovered in the kernel's collect_mounts function. If the kernel\naudit subsystem called collect_mounts to audit an unmounted path, it could\npanic the system. With this flaw, an unprivileged user could call umount\n(MNT_DETACH) to launch a denial-of-service attack. (CVE-2015-4177)\n\nA flaw was found in the Linux kernel which is related to the user namespace\nlazily unmounting file systems. The fs_pin struct has two members (m_list\nand s_list) which are usually initialized on use in the pin_insert_group\nfunction. However, these members might go unmodified; in this case, the\nsystem panics when it attempts to destroy or free them. This flaw could be\nused to launch a denial-of-service attack. (CVE-2015-4178)\n\nA DoS flaw was found for a Linux kernel built for the x86 architecture which\nhad the KVM virtualization support(CONFIG_KVM) enabled. The kernel would be\nvulnerable to a NULL pointer dereference flaw in Linux kernel's\nkvm_apic_has_events() function while doing an ioctl. An unprivileged user\nable to access the \"/dev/kvm\" device could use this flaw to crash the system\nkernel. (CVE-2015-4692)\n\nA flaw was found in the kernel's implementation of the Berkeley Packet\nFilter (BPF). A local attacker could craft BPF code to crash the system\nby creating a situation in which the JIT compiler would fail to correctly\noptimize the JIT image on the last pass. This would lead to the CPU\nexecuting instructions that were not part of the JIT code. (CVE-2015-4700)\n\nThe virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel\nbefore 4.2 attempts to support a FRAGLIST feature without proper memory\nallocation, which allows guest OS users to cause a denial of service (buffer\noverflow and memory corruption) via a crafted sequence of fragmented packets.\n(CVE-2015-5156)\n\nMoein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained\nhardcoded attributes about the USB devices. An attacker could construct a\nfake WhiteHEAT USB device that, when inserted, causes a denial of service\n(system crash) (CVE-2015-5257).\n\nA guest to host DoS issue was found affecting various hypervisors. In that,\na guest can DoS the host by triggering an infinite stream of \"alignment\ncheck\" (#AC) exceptions. This causes the microcode to enter an infinite loop\nwhere the core never receives another interrupt. The host kernel panics due\nto this effect (CVE-2015-5307).\n\nThe get_bitmap_file function in drivers/md/md.c in the Linux kernel before\n4.1.6 does not initialize a certain bitmap data structure, which allows\nlocal users to obtain sensitive information from kernel memory via a\nGET_BITMAP_FILE ioctl call. (CVE-2015-5697)\n\nUse-after-free vulnerability in the path_openat function in fs/namei.c in\nthe Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a\ndenial of service or possibly have unspecified other impact via O_TMPFILE\nfilesystem operations that leverage a duplicate cleanup operation.\n(CVE-2015-5706)\n\nIt was discovered that an integer overflow error existed in the SCSIgeneric\n(sg) driver in the Linux kernel. A local attacker with writepermission to a\nSCSI generic device could use this to cause a denial of service (system\ncrash) or potentially escalate their privileges. (CVE-2015-5707)\n\nThe __rds_conn_create function in net/rds/connection.c in the Linux kernel\nthrough 4.2.3 allows local users to cause a denial of service (NULL pointer\ndereference and system crash) or possibly have unspecified other impact by\nusing a socket that was not properly bound (CVE-2015-6937).\n\nThe key_gc_unused_keys function in security/keys/gc.c in the Linux kernel\nthrough 4.2.6 allows local users to cause a denial of service (OOPS) via\ncrafted keyctl commands (CVE-2015-7872).\n\nThe vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in\nthe Linux kernel through 4.3.3 does not initialize a certain structure\nmember, which allows local users to obtain sensitive information from\nkernel memory via a crafted application (CVE-2015-7884).\n\nThe dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the\nLinux kernel through 4.3.3 does not initialize a certain structure member,\nwhich allows local users to obtain sensitive information from kernel memory\nvia a crafted application (CVE-2015-7885).\n\nA guest to host DoS issue was found affecting various hypervisors. In that,\na guest can DoS the host by triggering an infinite stream of \"debug check\"\n(#DB) exceptions. This causes the microcode to enter an infinite loop where\nthe core never receives another interrupt. The host kernel panics due to\nthis effect (CVE-2015-8104).\n\nFelix Wilhelm discovered a race condition in the Xen paravirtualized\ndrivers which can cause double fetch vulnerabilities. An attacker in the\nparavirtualized guest could exploit this flaw to cause a denial of service\n(crash the host) or potentially execute arbitrary code on the host\n(CVE-2015-8550 / XSA-155).\n\nKonrad Rzeszutek Wilk discovered the Xen PCI backend driver does not\nperform sanity checks on the device's state. An attacker could exploit\nthis flaw to cause a denial of service (NULL dereference) on the host\n(CVE-2015-8551 / XSA-157).\n\nKonrad Rzeszutek Wilk discovered the Xen PCI backend driver does not\nperform sanity checks on the device's state. An attacker could exploit\nthis flaw to cause a denial of service by flooding the logging system\nwith WARN() messages causing the initial domain to exhaust disk space\n(CVE-2015-8552 / XSA-157).\n\nThe ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel\nthrough 4.3.3 attempts to merge distinct setattr operations, which allows\nlocal users to bypass intended access restrictions and modify the\nattributes of arbitrary overlay files via a crafted application\n(CVE-2015-8660).\n\nFor other upstream fixes, see the referenced changelogs.\n\nOther fixes in this update:\n* improve ath10k (QCA99X0, QCA988X, QCA6174) support (mga#16915)\n* silence a harmless warning on 32bit non-dt hardware (mga#17010)\n* fix regression with AlpsPS/2 ALPS DualPoint TouchPad of a Dell\n  Latitude D600 (mga#17034)\n","status":"published","published":"2016-01-14T01:44:39Z","modified":"2026-04-16T06:23:47.399673436Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2016-0225","title":"Updated kernel packages fix security vulnerabilities","description":"This kernel update provides an upgrade to the upstream 4.4 longterm kernel\nseries, currently based on 4.4.13 and resolves at least the following\nsecurity issues:\n\nThe Linux kernel before 4.4.1 allows local users to bypass file-descriptor\nlimits and cause a denial of service (memory consumption) by sending each\ndescriptor over a UNIX socket before closing it, related to \nnet/unix/af_unix.c and net/unix/garbage.c (CVE-2013-4312).\n\ndrivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows\nphysically proximate attackers to cause a denial of service (NULL pointer\ndereference and OOPS) or possibly have unspecified other impact via a\ncrafted USB device (CVE-2015-5257).\n\nThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through\n4.6.x, allows guest OS users to cause a denial of service (host OS panic or\nhang) by triggering many #AC (aka Alignment Check) exceptions, related to\nsvm.c and vmx.c (CVE-2015-5307).\n\nAn out-of-bounds memory read was found, affecting kernels from 4.3-rc1\nonwards. This vulnerability was caused by incorrect X.509 time validation\nin x509_decode_time() function in x509_cert_parser.c (CVE-2015-5327).\n\nThe __rds_conn_create function in net/rds/connection.c in the Linux kernel\nthrough 4.2.3 allows local users to cause a denial of service (NULL pointer\ndereference and system crash) or possibly have unspecified other impact by\nusing a socket that was not properly bound (CVE-2015-6937).\n\nThe keyctl_read_key function in security/keys/keyctl.c in the Linux kernel\nbefore 4.3.4 does not properly use a semaphore, which allows local users\nto cause a denial of service (NULL pointer dereference and system crash)\nor possibly have unspecified other impact via a crafted application that\nleverages a race condition between keyctl_revoke and keyctl_read calls\n(CVE-2015-7550).\n\nThe slhc_init function in drivers/net/slip/slhc.c in the Linux kernel\nthrough 4.2.3 does not ensure that certain slot numbers are valid, which\nallows local users to cause a denial of service (NULL pointer dereference\nand system crash) via a crafted PPPIOCSMAXCID ioctl call (CVE-2015-7799).\n\nThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through\n4.6.x, allows guest OS users to cause a denial of service (host OS panic\nor hang) by triggering many #DB (aka Debug) exceptions, related to svm.c\n(CVE-2015-8104).\n\nThe networking implementation in the Linux kernel through 4.3.3, as used\nin Android and other products, does not validate protocol identifiers for\ncertain protocol families, which allows local users to cause a denial of\nservice (NULL function pointer dereference and system crash) or possibly\ngain privileges by leveraging CLONE_NEWUSER support to execute a crafted\nSOCK_RAW application (CVE-2015-8543).\n\nAn issue with ASN.1 DER decoder was reported that could lead to memory\ncorruptions, possible privilege escalation, or complete local denial\nof service via x509 certificate DER files (CVE-2016-0758).\n\nThe evm_verify_hmac function in security/integrity/evm/evm_main.c in the\nLinux kernel before 4.5 does not properly copy data, which makes it easier\nfor local users to forge MAC values via a timing side-channel attack\n(CVE-2016-2085).\n\nThe atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the\nLinux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which\nallows remote attackers to obtain sensitive information from kernel memory\nby reading packet data (CVE-2016-2117).\n\nThe mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the\nLinux kernel before 4.5.1 allows physically proximate attackers to cause a\ndenial of service (NULL pointer dereference and system crash) via a crafted\nUSB device without two interrupt-in endpoint descriptors (CVE-2016-3136).\n\ndrivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows\nphysically proximate attackers to cause a denial of service (NULL pointer\ndereference and system crash) via a USB device without both an interrupt-in\nand an interrupt-out endpoint descriptor, related to the\ncypress_generic_port_probe and cypress_open functions (CVE-2016-3137).\n\nThe arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux\nkernel through 4.5.2 does not properly randomize the legacy base address,\nwhich makes it easier for local users to defeat the intended restrictions\non the ADDR_NO_RANDOMIZE flag, and bypass the ASLR protection mechanism\nfor a setuid or setgid program, by disabling stack-consumption resource\nlimits (CVE-2016-3672).\n\nLinux kernel built with the Kernel-based Virtual Machine(CONFIG_KVM) with\nvariable Memory Type Range Registers(MTRR) support is vulnerable to an\nout-of-bounds r/w access issue. It could occur while accessing processors\nMTRRs via ioctl(2) calls. A privileged user inside guest could use this\nflaw to manipulate host kernels memory bytes leading to information\ndisclosure OR potentially crashing the kernel resulting in DoS\n(CVE-2016-3713).\n\nXen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs\nsupport in x86 PV guests, which allows local PV guest users to cause a\ndenial of service (guest OS crash) by attempting to access a hugetlbfs\nmapped area (CVE-2016-3961).\n\nThe server kernels have been switched from SLAB to SLUB memory allocator as\nit performs better under high memory pressure for most users.\n\nThis update also provides better support for various newer hardware.\n\nFor other changes in this update, see the referenced changelogs.\n","status":"published","published":"2016-06-13T15:55:41Z","modified":"2026-04-16T06:22:24.493864674Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2016-0232","title":"Updated kernel-linus packages fix security vulnerabilities","description":"This kernel-linus update provides an upgrade to the upstream 4.4 longterm\nkernel series, currently based on 4.4.13 and resolves at least the following\nsecurity issues:\n\nThe Linux kernel before 4.4.1 allows local users to bypass file-descriptor\nlimits and cause a denial of service (memory consumption) by sending each\ndescriptor over a UNIX socket before closing it, related to \nnet/unix/af_unix.c and net/unix/garbage.c (CVE-2013-4312).\n\ndrivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows\nphysically proximate attackers to cause a denial of service (NULL pointer\ndereference and OOPS) or possibly have unspecified other impact via a\ncrafted USB device (CVE-2015-5257).\n\nThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through\n4.6.x, allows guest OS users to cause a denial of service (host OS panic or\nhang) by triggering many #AC (aka Alignment Check) exceptions, related to\nsvm.c and vmx.c (CVE-2015-5307).\n\nAn out-of-bounds memory read was found, affecting kernels from 4.3-rc1\nonwards. This vulnerability was caused by incorrect X.509 time validation\nin x509_decode_time() function in x509_cert_parser.c (CVE-2015-5327).\n\nThe __rds_conn_create function in net/rds/connection.c in the Linux kernel\nthrough 4.2.3 allows local users to cause a denial of service (NULL pointer\ndereference and system crash) or possibly have unspecified other impact by\nusing a socket that was not properly bound (CVE-2015-6937).\n\nThe keyctl_read_key function in security/keys/keyctl.c in the Linux kernel\nbefore 4.3.4 does not properly use a semaphore, which allows local users\nto cause a denial of service (NULL pointer dereference and system crash)\nor possibly have unspecified other impact via a crafted application that\nleverages a race condition between keyctl_revoke and keyctl_read calls\n(CVE-2015-7550).\n\nThe slhc_init function in drivers/net/slip/slhc.c in the Linux kernel\nthrough 4.2.3 does not ensure that certain slot numbers are valid, which\nallows local users to cause a denial of service (NULL pointer dereference\nand system crash) via a crafted PPPIOCSMAXCID ioctl call (CVE-2015-7799).\n\nThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through\n4.6.x, allows guest OS users to cause a denial of service (host OS panic\nor hang) by triggering many #DB (aka Debug) exceptions, related to svm.c\n(CVE-2015-8104).\n\nThe networking implementation in the Linux kernel through 4.3.3, as used\nin Android and other products, does not validate protocol identifiers for\ncertain protocol families, which allows local users to cause a denial of\nservice (NULL function pointer dereference and system crash) or possibly\ngain privileges by leveraging CLONE_NEWUSER support to execute a crafted\nSOCK_RAW application (CVE-2015-8543).\n\nThe evm_verify_hmac function in security/integrity/evm/evm_main.c in the\nLinux kernel before 4.5 does not properly copy data, which makes it easier\nfor local users to forge MAC values via a timing side-channel attack\n(CVE-2016-2085).\n\nThe atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the\nLinux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which\nallows remote attackers to obtain sensitive information from kernel memory\nby reading packet data (CVE-2016-2117).\n\nThe mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the\nLinux kernel before 4.5.1 allows physically proximate attackers to cause a\ndenial of service (NULL pointer dereference and system crash) via a crafted\nUSB device without two interrupt-in endpoint descriptors (CVE-2016-3136).\n\ndrivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows\nphysically proximate attackers to cause a denial of service (NULL pointer\ndereference and system crash) via a USB device without both an interrupt-in\nand an interrupt-out endpoint descriptor, related to the\ncypress_generic_port_probe and cypress_open functions (CVE-2016-3137).\n\nLinux kernel built with the Kernel-based Virtual Machine(CONFIG_KVM) with\nvariable Memory Type Range Registers(MTRR) support is vulnerable to an\nout-of-bounds r/w access issue. It could occur while accessing processors\nMTRRs via ioctl(2) calls. A privileged user inside guest could use this\nflaw to manipulate host kernels memory bytes leading to information\ndisclosure OR potentially crashing the kernel resulting in DoS\n(CVE-2016-3713).\n\nXen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs\nsupport in x86 PV guests, which allows local PV guest users to cause a\ndenial of service (guest OS crash) by attempting to access a hugetlbfs\nmapped area (CVE-2016-3961).\n\nThis update also provides better support for various newer hardware.\n\nFor other changes in this update, see the referenced changelogs.\n","status":"published","published":"2016-06-22T19:08:04Z","modified":"2026-04-16T06:24:16.33192183Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2016-0233","title":"Updated kernel-tmb packages fix security vulnerabilities","description":"This kernel-tmb update provides an upgrade to the upstream 4.4 longterm\nkernel series, currently based on 4.4.13 and resolves at least the following\nsecurity issues:\n\nThe Linux kernel before 4.4.1 allows local users to bypass file-descriptor\nlimits and cause a denial of service (memory consumption) by sending each\ndescriptor over a UNIX socket before closing it, related to \nnet/unix/af_unix.c and net/unix/garbage.c (CVE-2013-4312).\n\ndrivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows\nphysically proximate attackers to cause a denial of service (NULL pointer\ndereference and OOPS) or possibly have unspecified other impact via a\ncrafted USB device (CVE-2015-5257).\n\nThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through\n4.6.x, allows guest OS users to cause a denial of service (host OS panic or\nhang) by triggering many #AC (aka Alignment Check) exceptions, related to\nsvm.c and vmx.c (CVE-2015-5307).\n\nAn out-of-bounds memory read was found, affecting kernels from 4.3-rc1\nonwards. This vulnerability was caused by incorrect X.509 time validation\nin x509_decode_time() function in x509_cert_parser.c (CVE-2015-5327).\n\nThe __rds_conn_create function in net/rds/connection.c in the Linux kernel\nthrough 4.2.3 allows local users to cause a denial of service (NULL pointer\ndereference and system crash) or possibly have unspecified other impact by\nusing a socket that was not properly bound (CVE-2015-6937).\n\nThe keyctl_read_key function in security/keys/keyctl.c in the Linux kernel\nbefore 4.3.4 does not properly use a semaphore, which allows local users\nto cause a denial of service (NULL pointer dereference and system crash)\nor possibly have unspecified other impact via a crafted application that\nleverages a race condition between keyctl_revoke and keyctl_read calls\n(CVE-2015-7550).\n\nThe slhc_init function in drivers/net/slip/slhc.c in the Linux kernel\nthrough 4.2.3 does not ensure that certain slot numbers are valid, which\nallows local users to cause a denial of service (NULL pointer dereference\nand system crash) via a crafted PPPIOCSMAXCID ioctl call (CVE-2015-7799).\n\nThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through\n4.6.x, allows guest OS users to cause a denial of service (host OS panic\nor hang) by triggering many #DB (aka Debug) exceptions, related to svm.c\n(CVE-2015-8104).\n\nThe networking implementation in the Linux kernel through 4.3.3, as used\nin Android and other products, does not validate protocol identifiers for\ncertain protocol families, which allows local users to cause a denial of\nservice (NULL function pointer dereference and system crash) or possibly\ngain privileges by leveraging CLONE_NEWUSER support to execute a crafted\nSOCK_RAW application (CVE-2015-8543).\n\nAn issue with ASN.1 DER decoder was reported that could lead to memory\ncorruptions, possible privilege escalation, or complete local denial\nof service via x509 certificate DER files (CVE-2016-0758).\n\nThe evm_verify_hmac function in security/integrity/evm/evm_main.c in the\nLinux kernel before 4.5 does not properly copy data, which makes it easier\nfor local users to forge MAC values via a timing side-channel attack\n(CVE-2016-2085).\n\nThe atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the\nLinux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which\nallows remote attackers to obtain sensitive information from kernel memory\nby reading packet data (CVE-2016-2117).\n\nThe mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the\nLinux kernel before 4.5.1 allows physically proximate attackers to cause a\ndenial of service (NULL pointer dereference and system crash) via a crafted\nUSB device without two interrupt-in endpoint descriptors (CVE-2016-3136).\n\ndrivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows\nphysically proximate attackers to cause a denial of service (NULL pointer\ndereference and system crash) via a USB device without both an interrupt-in\nand an interrupt-out endpoint descriptor, related to the\ncypress_generic_port_probe and cypress_open functions (CVE-2016-3137).\n\nThe arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux\nkernel through 4.5.2 does not properly randomize the legacy base address,\nwhich makes it easier for local users to defeat the intended restrictions\non the ADDR_NO_RANDOMIZE flag, and bypass the ASLR protection mechanism\nfor a setuid or setgid program, by disabling stack-consumption resource\nlimits (CVE-2016-3672).\n\nLinux kernel built with the Kernel-based Virtual Machine(CONFIG_KVM) with\nvariable Memory Type Range Registers(MTRR) support is vulnerable to an\nout-of-bounds r/w access issue. It could occur while accessing processors\nMTRRs via ioctl(2) calls. A privileged user inside guest could use this\nflaw to manipulate host kernels memory bytes leading to information\ndisclosure OR potentially crashing the kernel resulting in DoS\n(CVE-2016-3713).\n\nXen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs\nsupport in x86 PV guests, which allows local PV guest users to cause a\ndenial of service (guest OS crash) by attempting to access a hugetlbfs\nmapped area (CVE-2016-3961).\n\nThis update also provides better support for various newer hardware.\n\nFor other changes in this update, see the referenced changelogs.\n","status":"published","published":"2016-06-22T19:08:04Z","modified":"2026-04-16T06:22:25.413451429Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"UBUNTU-CVE-2015-5257","description":"drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted USB device.  NOTE: this ID was incorrectly used for an Apache Cordova issue that has the correct ID of CVE-2015-8320.","status":"published","published":"2015-09-24T00:00:00Z","modified":"2026-10-28T08:17:11.109580364Z","updated_at":"2026-11-02T15:54:10.385269Z"},{"id":"USN-2794-1","title":"linux vulnerabilities","description":"It was discovered that in certain situations, a directory could be renamed\noutside of a bind mounted location. An attacker could use this to escape\nbind mount containment and gain access to sensitive information.\n(CVE-2015-2925)\n\nMoein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained\nhardcoded attributes about the USB devices. An attacker could construct a\nfake WhiteHEAT USB device that, when inserted, causes a denial of service\n(system crash). (CVE-2015-5257)\n","status":"published","published":"2015-11-05T16:23:56Z","modified":"2026-04-22T09:17:51.625611Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-2797-1","title":"linux-lts-utopic vulnerabilities","description":"It was discovered that the Linux kernel did not check if a new IPv6 MTU set\nby a user space application was valid. A remote attacker could forge a\nroute advertisement with an invalid MTU that a user space daemon like\nNetworkManager would honor and apply to the kernel, causing a denial of\nservice. (CVE-2015-0272)\n\nIt was discovered that in certain situations, a directory could be renamed\noutside of a bind mounted location. An attacker could use this to escape\nbind mount containment and gain access to sensitive information.\n(CVE-2015-2925)\n\nMoein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained\nhardcoded attributes about the USB devices. An attacker could construct a\nfake WhiteHEAT USB device that, when inserted, causes a denial of service\n(system crash). (CVE-2015-5257)\n\nIt was discovered that the SCTP protocol implementation in the Linux kernel\nperformed an incorrect sequence of protocol-initialization steps. A local\nattacker could use this to cause a denial of service (system crash).\n(CVE-2015-5283)\n","status":"published","published":"2015-11-05T17:34:42Z","modified":"2026-02-10T04:40:56Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-2798-1","title":"linux-lts-vivid vulnerabilities","description":"It was discovered that in certain situations, a directory could be renamed\noutside of a bind mounted location. An attacker could use this to escape\nbind mount containment and gain access to sensitive information.\n(CVE-2015-2925)\n\nMoein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained\nhardcoded attributes about the USB devices. An attacker could construct a\nfake WhiteHEAT USB device that, when inserted, causes a denial of service\n(system crash). (CVE-2015-5257)\n","status":"published","published":"2015-11-05T17:42:31Z","modified":"2026-02-10T04:40:56Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}