AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2015-3331

HIGH · CVSS 9.3 EPSS 10.11% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-05-27 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2015-3331
Severity
HIGH
CVSS
9.3
EPSS
10.11%
Linux

Original NVD Description

The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket.