Unrated severityNVD Advisory· Published Aug 31, 2015· Updated Jun 17, 2026
CVE-2015-4036
CVE-2015-4036
Description
Array index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call. NOTE: the affected function was renamed to vhost_scsi_make_tpg before the vulnerability was announced.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
26cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >3.6,<3.10.90
- cpe:2.3:o:linux:linux_kernel:3.6:-:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.6:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.6:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.6:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.6:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.6:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.6:rc7:*:*:*:*:*:*
- (no CPE)range: < 4.0
- osv-coords17 versionspkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012pkg:rpm/suse/kernel-ec2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2012pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/kgraft-patch-SLE12_Update_6&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012
< 3.12.44-52.10.1+ 16 more
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.3
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 3.12.44-52.10.1
- (no CPE)range: < 1-2.1
Patches
Vulnerability mechanics
References
10- www.openwall.com/lists/oss-security/2015/05/13/4nvdExploitMailing ListThird Party Advisory
- git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/nvdThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.htmlnvdThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.htmlnvdThird Party Advisory
- www.ubuntu.com/usn/USN-2633-1nvdThird Party Advisory
- www.ubuntu.com/usn/USN-2634-1nvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- github.com/torvalds/linux/commit/59c816c1f24df0204e01851431d3bab3eb76719cnvdThird Party Advisory
- www.securityfocus.com/bid/74664nvdVDB EntryURL Repurposed
- www.securitytracker.com/id/1033729nvdURL Repurposed
News mentions
0No linked articles in our index yet.