5.1 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
49.4%
Multiple race conditions in the ext4 filesystem implementation in the Linux
kernel before 4.5 allow local users to cause a denial of service (disk
corruption) by writing to a page that is associated with a different userβs
file after unsynchronized hole punching and page-fault handling.
Author | Note |
---|---|
sbeattie | see oss-sec thread discussion on which commits are a priority to backport |
seclists.org/oss-sec/2016/q2/1
seclists.org/oss-sec/2016/q2/6
bugzilla.suse.com/show_bug.cgi?id=972174
git.kernel.org/linus/011278485ecc3cd2a3954b5d4c73101d919bf1fa (v4.5-rc1)
git.kernel.org/linus/17048e8a083fec7ad841d88ef0812707fbc7e39f (v4.5-rc1)
git.kernel.org/linus/32ebffd3bbb4162da5ff88f9a35dd32d0a28ea70 (v4.5-rc1)
git.kernel.org/linus/ea3d7209ca01da209cda6f0dea8be9cc4b7a933b (v4.5-rc1)
launchpad.net/bugs/cve/CVE-2015-8839
nvd.nist.gov/vuln/detail/CVE-2015-8839
security-tracker.debian.org/tracker/CVE-2015-8839
ubuntu.com/security/notices/USN-3005-1
ubuntu.com/security/notices/USN-3006-1
ubuntu.com/security/notices/USN-3007-1
www.cve.org/CVERecord?id=CVE-2015-8839
5.1 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
49.4%