CVE-2015-8966

ADVISORY - nist

Summary

arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted (1) F_OFD_GETLK, (2) F_OFD_SETLK, or (3) F_OFD_SETLKW command in an fcntl64 system call.

EPSS Score⁠: 0.00182 (0.400)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-264⁠

Permissions, Privileges, and Access Controls

ADVISORY - redhat

CWE-284⁠

Improper Access Control

Impacted images

Advisories

NIST

CREATED

9 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2015-8966⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-264⁠

CVSS SCORE

7.8high

Debian

CREATED

9 years ago

UPDATED

12 days ago

ADVISORY IDCVE-2015-8966⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

9 years ago

UPDATED

8 months ago

ADVISORY IDCVE-2015-8966⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.8medium

Red Hat

CREATED

10 years ago

UPDATED

3 months ago

ADVISORY IDCVE-2015-8966⁠

EXPLOITABILITY SCORE

1.0

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-284⁠

CVSS SCORE

7low