VULNERABILITY INTELLIGENCE
CVE-2015-3332
CVSS score4.9 NONE
EPSS probability0.38%
CISA KEVNot currently listed
Published2015-05-27
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C
Description
A certain backport in the TCP Fast Open implementation for the Linux kernel before 3.18 does not properly maintain a count value, which allow local users to cause a denial of service (system crash) via the Fast Open feature, as demonstrated by visiting the chrome://flags/#enable-tcp-fast-open URL when using certain 3.10.x through 3.16.x kernel builds, including longterm-maintenance releases and ckt (aka Canonical Kernel Team) builds.
Weakness classification
- nvd@nist.gov: CWE-399