CVE-2015-7990: Linux Kernel

Medium severity, CVSS 5.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6937.

Affected products

• Linux Linux Kernel: up to and including 4.3.2

Published 2015-12-28. Last modified 2026-06-17.