CVE-2015-0274

2015-03-1600:00:00

ubuntu.com

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

The XFS implementation in the Linux kernel before 3.15 improperly uses an
old size value during remote attribute replacement, which allows local
users to cause a denial of service (transaction overrun and data
corruption) or possibly gain privileges by leveraging XFS filesystem
access.

Bugs

Notes

Author	Note
jdstrand	android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support
tyhicks	Introduced in v3.11-rc1 and fixed in v3.15-rc5 According to Red Hat, local priv escalation is possible

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlinux< 3.13.0-48.80UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-48.80~precise1UNKNOWN