NetSight
high7.0

CVE-2015-8963

Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (use-after-free) by le…

Impact

Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect handling of an swevent data structure during a CPU unplug operation.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.85
from 3.3 before 3.16.40
from 3.17 before 3.18.54
from 3.19 before 4.4

Weakness classification

References