CVE-2015-3212: Linux Kernel

Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2 allows local users to cause a denial of service (list corruption and panic) via a rapid series of system calls related to sockets, as demonstrated by setsockopt calls.

Affected products

• Linux Linux Kernel: up to and including 4.1.1

Published 2015-08-31. Last modified 2026-06-17.