CVE-2015-8709: Linux Kernel

High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days.

kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states "there is no kernel bug here.

Affected products

• Linux Linux Kernel: up to and including 4.4.1

Published 2016-02-08. Last modified 2026-06-17.