CVE-2015-4036

High

Published: 31/08/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Array index error in the tcm_vhost_make_tpg function in the Linux kernel before version 4.0 may allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call.

Risk Assessment

This vulnerability may lead to system crashes or unforeseen consequences, potentially affecting the availability of virtual services within the organization.

Recommendation

It is recommended to update the Linux kernel to version 4.0 or later to mitigate this vulnerability.

Other vulnerabilities in Linux kernel (przed wersją 4.0)

CVE-2016-6787High
The Linux kernel before version 4.0 has a lock mismanagement issue in the performance subsystem during certain migrations, allowing local users to gain privileges via a crafted application.

Original NVD description (English source)

Array index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call. NOTE: the affected function was renamed to vhost_scsi_make_tpg before the vulnerability was announced.