Launchpad.net

CVE 2015-8539

The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c.

Related bugs and status

CVE-2015-8539 (Candidate) is related to these bugs:

Bug #1525569: CVE-2015-8539

		In	Importance	Status
1525569	CVE-2015-8539	linux (Ubuntu)	Medium	Fix Released
1525569	CVE-2015-8539	linux-mvl-dove (Ubuntu)	Medium	Invalid
1525569	CVE-2015-8539	linux-ti-omap4 (Ubuntu)	Medium	Invalid
1525569	CVE-2015-8539	linux-mvl-dove (Ubuntu Xenial)	Medium	Invalid
1525569	CVE-2015-8539	linux-ti-omap4 (Ubuntu Xenial)	Medium	Invalid
1525569	CVE-2015-8539	linux-mvl-dove (Ubuntu Wily)	Medium	Invalid
1525569	CVE-2015-8539	linux-ti-omap4 (Ubuntu Wily)	Medium	Invalid
1525569	CVE-2015-8539	linux-mvl-dove (Ubuntu Vivid)	Medium	Invalid
1525569	CVE-2015-8539	linux-ti-omap4 (Ubuntu Vivid)	Medium	Invalid
1525569	CVE-2015-8539	linux (Ubuntu Trusty)	Medium	Fix Released
1525569	CVE-2015-8539	linux-mvl-dove (Ubuntu Trusty)	Medium	Invalid
1525569	CVE-2015-8539	linux-ti-omap4 (Ubuntu Trusty)	Medium	Invalid
1525569	CVE-2015-8539	linux (Ubuntu Precise)	Medium	Won't Fix
1525569	CVE-2015-8539	linux-mvl-dove (Ubuntu Precise)	Medium	Invalid
1525569	CVE-2015-8539	linux-ti-omap4 (Ubuntu Precise)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-trusty (Ubuntu)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-trusty (Ubuntu Precise)	Medium	Fix Released
1525569	CVE-2015-8539	linux-lts-trusty (Ubuntu Trusty)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-trusty (Ubuntu Vivid)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-trusty (Ubuntu Wily)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-trusty (Ubuntu Xenial)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-wily (Ubuntu)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-wily (Ubuntu Precise)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-wily (Ubuntu Trusty)	Medium	Won't Fix
1525569	CVE-2015-8539	linux-lts-wily (Ubuntu Vivid)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-wily (Ubuntu Wily)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-wily (Ubuntu Xenial)	Medium	Invalid
1525569	CVE-2015-8539	linux-goldfish (Ubuntu Trusty)	Medium	Won't Fix
1525569	CVE-2015-8539	linux-goldfish (Ubuntu Xenial)	Medium	Won't Fix
1525569	CVE-2015-8539	linux-lts-saucy (Ubuntu)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-saucy (Ubuntu Precise)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-saucy (Ubuntu Trusty)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-saucy (Ubuntu Vivid)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-saucy (Ubuntu Wily)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-saucy (Ubuntu Xenial)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-quantal (Ubuntu)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-quantal (Ubuntu Precise)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-quantal (Ubuntu Trusty)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-quantal (Ubuntu Vivid)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-quantal (Ubuntu Wily)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-quantal (Ubuntu Xenial)	Medium	Invalid
1525569	CVE-2015-8539	linux-flo (Ubuntu Trusty)	Medium	Won't Fix
1525569	CVE-2015-8539	linux-flo (Ubuntu Xenial)	Medium	Won't Fix
1525569	CVE-2015-8539	linux-raspi2 (Ubuntu)	Medium	Fix Released
1525569	CVE-2015-8539	linux-lts-vivid (Ubuntu)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-vivid (Ubuntu Precise)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-vivid (Ubuntu Trusty)	Medium	Won't Fix
1525569	CVE-2015-8539	linux-lts-vivid (Ubuntu Vivid)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-vivid (Ubuntu Wily)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-vivid (Ubuntu Xenial)	Medium	Invalid
1525569	CVE-2015-8539	linux-mako (Ubuntu Trusty)	Medium	Won't Fix
1525569	CVE-2015-8539	linux-mako (Ubuntu Xenial)	Medium	Won't Fix
1525569	CVE-2015-8539	linux-lts-utopic (Ubuntu)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-utopic (Ubuntu Precise)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-utopic (Ubuntu Trusty)	Medium	Won't Fix
1525569	CVE-2015-8539	linux-lts-utopic (Ubuntu Vivid)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-utopic (Ubuntu Wily)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-utopic (Ubuntu Xenial)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-raring (Ubuntu)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-raring (Ubuntu Precise)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-raring (Ubuntu Trusty)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-raring (Ubuntu Vivid)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-raring (Ubuntu Wily)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-raring (Ubuntu Xenial)	Medium	Invalid
1525569	CVE-2015-8539	linux-manta (Ubuntu)	Medium	Invalid
1525569	CVE-2015-8539	linux-manta (Ubuntu Precise)	Medium	Invalid
1525569	CVE-2015-8539	linux-manta (Ubuntu Trusty)	Medium	Won't Fix
1525569	CVE-2015-8539	linux-manta (Ubuntu Xenial)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-quantal (Ubuntu Yakkety)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-raring (Ubuntu Yakkety)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-saucy (Ubuntu Yakkety)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-trusty (Ubuntu Yakkety)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-utopic (Ubuntu Yakkety)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-vivid (Ubuntu Yakkety)	Medium	Invalid
1525569	CVE-2015-8539	linux-lts-wily (Ubuntu Yakkety)	Medium	Invalid

Bug #1791286: The VM hang happens because of pending interrupts not reinjected when migrating the VM several times

Summary				In	Importance	Status
	1791286	The VM hang happens because of pending interrupts not reinjected when migrating the VM several times		linux (Ubuntu)	Medium	Fix Released
	1791286	The VM hang happens because of pending interrupts not reinjected when migrating the VM several times		linux (Ubuntu Trusty)	Medium	Fix Released

Bug #1793461: Improvements to the kernel source package preparation

		In	Importance	Status
1793461	Improvements to the kernel source package preparation	linux (Ubuntu)	Undecided	Fix Released
1793461	Improvements to the kernel source package preparation	linux (Ubuntu Xenial)	Undecided	Fix Released
1793461	Improvements to the kernel source package preparation	linux (Ubuntu Precise)	Undecided	Fix Released
1793461	Improvements to the kernel source package preparation	linux (Ubuntu Trusty)	Undecided	Fix Released
1793461	Improvements to the kernel source package preparation	linux (Ubuntu Bionic)	Undecided	Fix Released
1793461	Improvements to the kernel source package preparation	linux (Ubuntu Cosmic)	Undecided	Fix Released
1793461	Improvements to the kernel source package preparation	linux-hwe-edge (Ubuntu)	Undecided	New
1793461	Improvements to the kernel source package preparation	linux-hwe-edge (Ubuntu Bionic)	Undecided	Fix Committed
1793461	Improvements to the kernel source package preparation	linux-hwe-edge (Ubuntu Cosmic)	Undecided	New
1793461	Improvements to the kernel source package preparation	linux-hwe-edge (Ubuntu Xenial)	Undecided	New

Bug #1795595: linux: 3.13.0-161.211 -proposed tracker

		In	Importance	Status
1795595	linux: 3.13.0-161.211 -proposed tracker	linux (Ubuntu)	Undecided	Invalid
1795595	linux: 3.13.0-161.211 -proposed tracker	linux (Ubuntu Trusty)	Medium	Fix Released
1795595	linux: 3.13.0-161.211 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1795595	linux: 3.13.0-161.211 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Fix Released
1795595	linux: 3.13.0-161.211 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Fix Released
1795595	linux: 3.13.0-161.211 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1795595	linux: 3.13.0-161.211 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1795595	linux: 3.13.0-161.211 -proposed tracker	Kernel SRU Workflow prepare-package-signed	Medium	Fix Released
1795595	linux: 3.13.0-161.211 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1795595	linux: 3.13.0-161.211 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1795595	linux: 3.13.0-161.211 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1795595	linux: 3.13.0-161.211 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1795595	linux: 3.13.0-161.211 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1795595	linux: 3.13.0-161.211 -proposed tracker	Kernel SRU Workflow upload-to-ppa	Medium	Invalid
1795595	linux: 3.13.0-161.211 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

Bug #1801708: test_cve_2015_8539_2 failed with 3.2 Precise ESM

		In	Importance	Status
1801708	test_cve_2015_8539_2 failed with 3.2 Precise ESM	linux (Ubuntu)	Undecided	Invalid
1801708	test_cve_2015_8539_2 failed with 3.2 Precise ESM	QA Regression Testing	Undecided	Fix Released
1801708	test_cve_2015_8539_2 failed with 3.2 Precise ESM	ubuntu-kernel-tests	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2015-8539

Related bugs and status

Related bugs

References