CVE-2015-6252

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.1.5

Description The issue allows local users to cause a denial of service, specifically memory consumption, by making a VHOST SET LOG FD ioctl call that triggers permanent file-descriptor allocation. This occurs due to a problem in the vhost dev ioctl function in drivers/vhost/vhost.c.

Recommendations For Linux kernel versions prior to 4.1.5, update to version 4.1.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the vhost dev ioctl function to minimize the risk of exploitation.