CVE-2015-8812

Critical

Published: 27/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In the Linux kernel before version 4.5, there is a bug in iwch_cm.c that does not properly identify error conditions. This allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.

Risk Assessment

This vulnerability poses a serious risk to organizations, allowing remote attackers to gain control over the system or disrupt its operation.

Recommendation

It is recommended to update the Linux kernel to version 4.5 or later to mitigate this vulnerability.

Original NVD description (English source)

drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.