CVE-2015-3636 is a use-after-free vulnerability in the Linux kernel (before version 4.0.3) affecting canonical, debian, linux, and redhat distributions. A local attacker can exploit this flaw by leveraging specific socket system calls to cause a denial of service (system crash) or potentially gain privileges. With a CVSS score of 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C), it is considered a local attack with low complexity, primarily impacting system availability. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the KEV catalog, despite significant community discussion and media coverage, though the media coverage appears unrelated to the actual vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 4.0.2CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | ||
12.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:N/I:N/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.