CVE-2015-1339
Fixed in a distro release EPSS <1%
Memory leak in the cuse_channel_release function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service (memory consumption) or possibly have unspecified other impact by opening /dev/cuse many times.
Products: linux_kernel, novell suse_linux_enterprise_debuginfo, novell suse_linux_enterprise_real_time_extension
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 4.4.2-1 |
| Debian 13 | linux | 4.4.2-1 |
| Debian 14 | linux | 4.4.2-1 |
| SUSE Linux Enterprise Real Time 11 SP4 | kernel-rt | 3.0.101.rt130-54.1 |
| SUSE Linux Enterprise Real Time 11 SP4 | kernel-rt_trace | 3.0.101.rt130-54.1 |
| SUSE Linux Enterprise Real Time 11 SP4 | kernel-source-rt | 3.0.101.rt130-54.1 |
| SUSE Linux Enterprise Real Time 11 SP4 | kernel-syms-rt | 3.0.101.rt130-54.1 |
| Ubuntu 14.04 LTS | linux-lts-wily | 4.2.0-30.35~14.04.1 |