** Description changed: - It was discovered that the Reliable Datagram Sockets (RDS) - implementation in the Linux kernel did not verify sockets were properly - bound before attempting to send a message, which could cause a NULL - pointer dereference. An attacker could use this to cause a denial of - service (system crash). + The __rds_conn_create function in net/rds/connection.c in the Linux + kernel through 4.2.3 allows local users to cause a denial of service + (NULL pointer dereference and system crash) or possibly have unspecified + other impact by using a socket that was not properly bound. Break-Fix: - 74e98eb085889b0d2d4908f59f6e00026063014f
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1496232 Title: CVE-2015-6937 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1496232/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
