PT-2016-3888 · Linux+2 · Linux Kernel+2

Dmitry Monakhov · Published 2016-05-02 · Updated 2023-02-13 · CVE-2015-8324

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.34

Description The issue is related to the ext4 implementation in the Linux kernel, where certain data structures are not properly tracked during initialization. This can be exploited by physically proximate attackers using a crafted USB device, leading to a denial of service through a NULL pointer dereference and panic. The problem is associated with the ext4 fill super function.

Recommendations For Linux kernel versions prior to 2.6.34, update to version 2.6.34 or later to resolve the issue.

Fix

Related Identifiers

CESA-2016_0855

CVE-2015-8324

DLA-360-1

RHSA-2016:0855

RHSA-2016_0855

Affected Products

Centos

Linux Kernel

Red Hat

References · 17

• https://github.com/torvalds/linux/commit/744692dc059845b2a3022119871846e74d4f6e11 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8324 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-0855.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8324 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-8324 · Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=744692dc059845b2a3022119871846e74d4f6e11 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8324 · Security Note
• http://rhn.redhat.com/errata/RHSA-2016-0855.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-8324 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-8324 · Security Note
• https://linux.oracle.com/errata/ELSA-2016-3567.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8324 · Vendor Advisory
• http://oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html · Note
• https://bugs.openvz.org/browse/OVZ-6541 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1267261 · Note