CVE-2015-8539
Fixed in a distro release EPSS <1%
The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c.
Products: canonical ubuntu_linux, suse linux_enterprise_real_time_extension, linux_kernel
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 | kernel | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-abi-whitelists | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-bootwrapper | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug-debuginfo | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug-devel | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-ppc64 | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-ppc64le | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-s390x | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-x86_64 | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-devel | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-doc | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-headers | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump-debuginfo | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump-devel | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-debuginfo | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-libs | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-libs-devel | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | perf | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | perf-debuginfo | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | python-perf | 0:3.10.0-693.17.1.el7 |
| Red Hat Enterprise Linux 7 | python-perf-debuginfo | 0:3.10.0-693.17.1.el7 |
| Red Hat enterprise mrg 2 server el6 | kernel-rt | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debug | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debug-debuginfo | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debug-devel | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debuginfo | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debuginfo-common-x86_64 | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-devel | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-doc | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-firmware | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-trace | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-trace-debuginfo | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-trace-devel | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-vanilla | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-vanilla-debuginfo | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-vanilla-devel | 1:3.10.0-693.17.1.rt56.604.el6rt |
| Red Hat rhel extras rt 7 | kernel-rt | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-debuginfo | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-devel | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-kvm | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-kvm-debuginfo | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debuginfo | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debuginfo-common-x86_64 | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-devel | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-doc | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-kvm | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-kvm-debuginfo | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-debuginfo | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-devel | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-kvm | 0:3.10.0-693.17.1.rt56.636.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-kvm-debuginfo | 0:3.10.0-693.17.1.rt56.636.el7 |
| SUSE Linux Enterprise Desktop 11 SP4 | kernel-default | 3.0.101-71.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | kernel-pae | 3.0.101-71.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | kernel-source | 3.0.101-71.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | kernel-syms | 3.0.101-71.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | kernel-trace | 3.0.101-71.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | kernel-xen | 3.0.101-71.1 |
| SUSE Linux Enterprise Desktop 12 | kernel-default | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Desktop 12 | kernel-source | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Desktop 12 | kernel-syms | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Desktop 12 | kernel-xen | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | kernel-default | 3.12.53-60.30.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | kernel-source | 3.12.53-60.30.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | kernel-syms | 3.12.53-60.30.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | kernel-xen | 3.12.53-60.30.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12-SP1_Update_0 | 2-5.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12-SP1_Update_1 | 2-2.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12-SP1_Update_3 | 1-2.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12_Update_1 | 5-2.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12_Update_10 | 1-2.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12_Update_2 | 5-2.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12_Update_3 | 4-2.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12_Update_4 | 4-2.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12_Update_5 | 4-2.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12_Update_6 | 3-2.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12_Update_7 | 3-2.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12_Update_8 | 2-2.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12_Update_9 | 2-2.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | kernel-ec2 | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | kernel-ec2 | 3.12.53-60.30.1 |
| SUSE Linux Enterprise Real Time 11 SP4 | kernel-rt | 3.0.101.rt130-51.1 |
| SUSE Linux Enterprise Real Time 11 SP4 | kernel-rt_trace | 3.0.101.rt130-51.1 |
| SUSE Linux Enterprise Real Time 11 SP4 | kernel-source-rt | 3.0.101.rt130-51.1 |
| SUSE Linux Enterprise Real Time 11 SP4 | kernel-syms-rt | 3.0.101.rt130-51.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-compute | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-compute_debug | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-rt | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-rt_debug | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-source-rt | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Real Time 12 SP1 | kernel-syms-rt | 3.12.61-60.18.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-default | 3.0.101-0.7.40.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-ec2 | 3.0.101-0.7.40.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-pae | 3.0.101-0.7.40.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-source | 3.0.101-0.7.40.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-syms | 3.0.101-0.7.40.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-trace | 3.0.101-0.7.40.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-xen | 3.0.101-0.7.40.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | kernel-bigsmp | 3.0.101-0.47.79.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | kernel-default | 3.0.101-0.47.79.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | kernel-ec2 | 3.0.101-0.47.79.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | kernel-pae | 3.0.101-0.47.79.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | kernel-source | 3.0.101-0.47.79.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | kernel-syms | 3.0.101-0.47.79.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | kernel-trace | 3.0.101-0.47.79.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | kernel-xen | 3.0.101-0.47.79.1 |
| SUSE Linux Enterprise Server 11 SP4 | kernel-default | 3.0.101-71.1 |
| SUSE Linux Enterprise Server 11 SP4 | kernel-ec2 | 3.0.101-71.1 |
| SUSE Linux Enterprise Server 11 SP4 | kernel-pae | 3.0.101-71.1 |
| SUSE Linux Enterprise Server 11 SP4 | kernel-ppc64 | 3.0.101-71.1 |
| SUSE Linux Enterprise Server 11 SP4 | kernel-source | 3.0.101-71.1 |
| SUSE Linux Enterprise Server 11 SP4 | kernel-syms | 3.0.101-71.1 |
| SUSE Linux Enterprise Server 11 SP4 | kernel-trace | 3.0.101-71.1 |
| SUSE Linux Enterprise Server 11 SP4 | kernel-xen | 3.0.101-71.1 |
| SUSE Linux Enterprise Server 12 | kernel-default | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Server 12 | kernel-source | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Server 12 | kernel-syms | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Server 12 | kernel-xen | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Server 12 SP1 | kernel-default | 3.12.53-60.30.1 |
| SUSE Linux Enterprise Server 12 SP1 | kernel-source | 3.12.53-60.30.1 |
| SUSE Linux Enterprise Server 12 SP1 | kernel-syms | 3.12.53-60.30.1 |
| SUSE Linux Enterprise Server 12 SP1 | kernel-xen | 3.12.53-60.30.1 |
| SUSE Linux Enterprise Server 12 SP1 | lttng-modules | 2.7.0-3.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | kernel-default | 3.0.101-71.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | kernel-ec2 | 3.0.101-71.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | kernel-pae | 3.0.101-71.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | kernel-ppc64 | 3.0.101-71.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | kernel-source | 3.0.101-71.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | kernel-syms | 3.0.101-71.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | kernel-trace | 3.0.101-71.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | kernel-xen | 3.0.101-71.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | kernel-default | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | kernel-source | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | kernel-syms | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | kernel-xen | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kernel-default | 3.12.53-60.30.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kernel-source | 3.12.53-60.30.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kernel-syms | 3.12.53-60.30.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kernel-xen | 3.12.53-60.30.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | lttng-modules | 2.7.0-3.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | kernel-docs | 3.0.101-71.2 |
| SUSE Linux Enterprise Software Development Kit 12 | kernel-docs | 3.12.51-52.34.3 |
| SUSE Linux Enterprise Software Development Kit 12 | kernel-obs-build | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | kernel-docs | 3.12.53-60.30.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | kernel-obs-build | 3.12.53-60.30.2 |
| SUSE Linux Enterprise Workstation Extension 12 | kernel-default | 3.12.51-52.34.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | kernel-default | 3.12.53-60.30.1 |
| SUSE Manager 2.1 | kernel-bigsmp | 3.0.101-0.47.79.1 |
| SUSE Manager 2.1 | kernel-default | 3.0.101-0.47.79.1 |
| SUSE Manager 2.1 | kernel-ec2 | 3.0.101-0.47.79.1 |
| SUSE Manager 2.1 | kernel-source | 3.0.101-0.47.79.1 |
| SUSE Manager 2.1 | kernel-syms | 3.0.101-0.47.79.1 |
| SUSE Manager 2.1 | kernel-trace | 3.0.101-0.47.79.1 |
| SUSE Manager 2.1 | kernel-xen | 3.0.101-0.47.79.1 |
| SUSE Manager Proxy 2.1 | kernel-bigsmp | 3.0.101-0.47.79.1 |
| SUSE Manager Proxy 2.1 | kernel-default | 3.0.101-0.47.79.1 |
| SUSE Manager Proxy 2.1 | kernel-ec2 | 3.0.101-0.47.79.1 |
| SUSE Manager Proxy 2.1 | kernel-source | 3.0.101-0.47.79.1 |
| SUSE Manager Proxy 2.1 | kernel-syms | 3.0.101-0.47.79.1 |
| SUSE Manager Proxy 2.1 | kernel-trace | 3.0.101-0.47.79.1 |
| SUSE Manager Proxy 2.1 | kernel-xen | 3.0.101-0.47.79.1 |
| SUSE OpenStack Cloud 5 | kernel-bigsmp | 3.0.101-0.47.79.1 |
| SUSE OpenStack Cloud 5 | kernel-default | 3.0.101-0.47.79.1 |
| SUSE OpenStack Cloud 5 | kernel-ec2 | 3.0.101-0.47.79.1 |
| SUSE OpenStack Cloud 5 | kernel-source | 3.0.101-0.47.79.1 |
| SUSE OpenStack Cloud 5 | kernel-syms | 3.0.101-0.47.79.1 |
| SUSE OpenStack Cloud 5 | kernel-trace | 3.0.101-0.47.79.1 |
| SUSE OpenStack Cloud 5 | kernel-xen | 3.0.101-0.47.79.1 |
| Ubuntu 14.04 LTS | linux | 3.13.0-161.211 |
| openSUSE Tumbleweed | kernel-source | 4.8.13-1.1 |