CVE-2015-4700: Linux Kernel

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

The bpf_int_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allows local users to cause a denial of service (system crash) by creating a packet filter and then loading crafted BPF instructions that trigger late convergence by the JIT compiler.

Affected products

  • Linux Linux Kernel: up to and including 4.0.5

Published 2015-08-31. Last modified 2026-06-17.