Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceCVE-2015-7990

CVE-2015-7990

MEDIUM5.8

Race condition in the rds_sendmsg function in net/rds/sendmsg

Published Dec 28, 2015

Modified 1 years ago

Details

Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6937.

References(38)

WEBhttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8c7188b23474cca017b3ef354c4a58456f68303a ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html ADVISORYhttp://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html ADVISORYhttp://www.debian.org/security/2015/dsa-3396 WEBhttp://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3 WEBhttp://www.openwall.com/lists/oss-security/2015/10/27/5 WEBhttp://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html WEBhttp://www.securityfocus.com/bid/77340 WEBhttp://www.securitytracker.com/id/1034453 ADVISORYhttp://www.ubuntu.com/usn/USN-2886-1

CVSS Analysis

CVSS v3.0

5.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

HighA:H

5.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Ecosystems

Timeline

PublishedDec 28, 2015

ModifiedAug 6, 2024

CVE-2015-7990 | Mondoo Vulnerability Intelligence