Linux Kernel CVE Statistics
10 Linux Kernel CVEs in October 2015
Full month · Source: NIST NVD
In October 2015, 10 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 1 was rated High severity and 8 Medium. No CVEs from this month have been confirmed as actively exploited via the CISA KEV catalog. October's 10 CVEs represent 12% of all 2015 Linux kernel CVEs , up from September's 1 (a 900% month-over-month increase) .
10
Total CVEs
0
Critical
1
High
8
Medium
1
Low
0
KEV Exploited
All CVEs — October 2015
10 CVEs
| CVE ID | Package | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|---|
| CVE-2013-7445 | linux | High | 7.8 | 2015-10-16 | The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution… | |
| CVE-2015-7613 | linux | Medium | 6.9 | 2015-10-19 | Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges… | |
| CVE-2015-5156 | linux | Medium | 6.1 | 2015-10-19 | The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST fe… | |
| CVE-2015-6937 | linux | Medium | 4.9 | 2015-10-19 | The __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a … | |
| CVE-2015-7833 | linux | Medium | 4.9 | 2015-10-19 | The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise … | |
| CVE-2015-7799 | linux | Medium | 4.9 | 2015-10-19 | The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot n… | |
| CVE-2015-0275 | linux | Medium | 4.9 | 2015-10-19 | The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial o… | |
| CVE-2015-5283 | linux | Medium | 4.7 | 2015-10-19 | The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-in… | |
| CVE-2015-5707 | linux | Medium | 4.6 | 2015-10-19 | Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 all… | |
| CVE-2015-6252 | linux | Low | 2.1 | 2015-10-19 | The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows local users to cause a de… |