CVE-2015-3331: Canonical Ubuntu Linux

High severity, CVSS 9.3. EPSS: 10% chance of exploitation in the next 30 days.

The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket.

Affected products

• Canonical Ubuntu Linux: version 12.04 only
• Debian Debian Linux: version 7.0 only; version 8.0 only
• Linux Linux Kernel: before 3.2.69 (fixed in 3.2.69); from 3.3, before 3.4.108 (fixed in 3.4.108); from 3.5, before 3.10.73 (fixed in 3.10.73); from 3.12, before 3.12.40 (fixed in 3.12.40); from 3.13, before 3.14.37 (fixed in 3.14.37); from 3.15, before 3.16.35 (fixed in 3.16.35); …

Published 2015-05-27. Last modified 2026-06-17.