PT-2016-4073 · Linux+1 · Linux Kernel+1

Aaro Koskinen + 46 · Published 2013-12-03 · Updated 2023-01-19 · CVE-2015-8961

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.3.3

Description The issue allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging improper access to a certain error field in the ext4 journal stop function.

Recommendations For versions prior to 4.3.3, update to version 4.3.3 or later to resolve the issue.

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2013-1234

ALT-PU-2015-2110

ALT-PU-2015-2119

CVE-2015-8961

Affected Products

Alt Linux

Linux Kernel

References · 40

• https://github.com/torvalds/linux/commit/6934da9238da947628be83635e365df41064b09b · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7884 · Security Note
• https://errata.altlinux.org/ALT-PU-2013-1234 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4579 · Security Note
• https://errata.altlinux.org/ALT-PU-2015-2110 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8961 · Security Note
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6934da9238da947628be83635e365df41064b09b · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04307 · Security Note
• https://bdu.fstec.ru/vul/2022-01630 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8961 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7990 · Security Note
• https://bdu.fstec.ru/vul/2016-01939 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8569 · Security Note
• https://bdu.fstec.ru/vul/2015-04310 · Security Note
• https://cve.org/CVERecord?id=CVE-2015-8961 · Security Note