{"id":"CVE-2015-8830","published":"2016-05-02T10:00:00Z","modified":"2024-08-06T08:29:22Z","title":"Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to…","vendor":null,"product":null,"tier":"tail","description":{"text":"Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.  NOTE: this vulnerability exists because of a CVE-2012-6701 regression.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00496,"percentile":0.42424,"provenance":"source"},"cwes":[],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:3083","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://github.com/torvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b","tags":["x_refsource_CONFIRM"]},{"url":"http://www.ubuntu.com/usn/USN-2970-1","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1854","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.debian.org/security/2016/dsa-3503","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://www.ubuntu.com/usn/USN-2969-1","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://www.ubuntu.com/usn/USN-2968-1","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314275","tags":["x_refsource_CONFIRM"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4f4b82694fe48b02f7a881a1797131a6dad1364","tags":["x_refsource_CONFIRM"]},{"url":"http://www.ubuntu.com/usn/USN-2968-2","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c185ce06dca14f5cea192f5a2c981ef50663f2b","tags":["x_refsource_CONFIRM"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/02/9","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3096","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://github.com/torvalds/linux/commit/c4f4b82694fe48b02f7a881a1797131a6dad1364","tags":["x_refsource_CONFIRM"]}],"priority":{"score":8.5,"factors":[{"name":"EPSS percentile","points":8.48}]},"euvd":{"id":"EUVD-2015-8696","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2012-6701-family-cve-2012-6701","parents":[{"from":"CVE-2012-6701","to":"CVE-2015-8830","relation":"regression","confidence":"high","kind":"lineage","orderedBy":"description","evidence":[{"kind":"text","provenance":"source","relation":"regression","quote":"NOTE: this vulnerability exists because of a CVE-2012-6701 regression.","from":"CVE.org","in":"CVE-2015-8830"},{"kind":"same-code","provenance":"machine","files":["fs/aio.c"],"commits":["https://github.com/torvalds/linux/commit/a70b52ec1aaeaf60f4739edb1b422827cb6f3893","https://github.com/torvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b","https://github.com/torvalds/linux/commit/c4f4b82694fe48b02f7a881a1797131a6dad1364"],"basis":"shared function","functions":["kiocb"]}]}],"children":[{"from":"CVE-2015-8830","to":"CVE-2016-10044","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["fs/aio.c"],"commits":["https://github.com/torvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b","https://github.com/torvalds/linux/commit/c4f4b82694fe48b02f7a881a1797131a6dad1364","https://github.com/torvalds/linux/commit/22f6b4d34fcf039c63a94e7670e0da24f8575a5a"],"basis":"rarely changed file"}]}]}}