CVE-2024-14027

In the Linux kernel, CVE-2024-14027 affects the xattr path: fremovexattr() calls fdget() but omits fdput() on failure of strncpy_from_user() for the name argument, leaking a file reference per call in multi-threaded processes and enabling local kernel memory exhaustion by an unprivileged user. Th...

CVE-2015-8952

The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service soft lockup via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samb...