CVE-2015-8709

CVE-2015-8709 describes a privilege escalation vulnerability in the Linux kernel (through version 4.4.1), specifically within the kernel/ptrace.c component, due to improper handling of uid and gid mappings in user namespaces. A local attacker could exploit this by creating a user namespace, luring a root process into it with unsafe UIDs/GIDs, and then leveraging the ptrace system call to gain elevated privileges. With a CVSS v3 score of 7.0 (HIGH), this vulnerability has a local attack vector and high impact on confidentiality, integrity, and availability, though it requires high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, and the vendor disputes the existence of a kernel bug.