PT-2016-3888 · Linux+2 · Linux Kernel+2

Dmitry Monakhov · Publicado 2016-05-02 · Atualizado 2023-02-13 · CVE-2015-8324

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.34

Description The issue is related to the ext4 implementation in the Linux kernel, where certain data structures are not properly tracked during initialization. This can be exploited by physically proximate attackers using a crafted USB device, leading to a denial of service through a NULL pointer dereference and panic. The problem is associated with the ext4 fill super function.

Recommendations For Linux kernel versions prior to 2.6.34, update to version 2.6.34 or later to resolve the issue.

Correção

Identificadores relacionados

CESA-2016_0855

CVE-2015-8324

DLA-360-1

RHSA-2016:0855

RHSA-2016_0855

Produtos afetados

Centos

Linux Kernel

Red Hat

Referências · 17

• https://github.com/torvalds/linux/commit/744692dc059845b2a3022119871846e74d4f6e11 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8324 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2016-0855.html · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-8324 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2015-8324 · Aviso do Fabricante
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=744692dc059845b2a3022119871846e74d4f6e11 · Aviso do Fabricante
• http://oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html · Nota
• https://bugs.openvz.org/browse/OVZ-6541 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1267261 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-8324 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2016-0855.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2015/11/23/2 · Nota
• https://osv.dev/vulnerability/CVE-2015-8324 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2015-8324 · Nota de Segurança
• http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.34 · Nota