imPC@ndo IT

Tracker / CVE-2015-8961

CVE-2015-8961

High 7.8

The __ext4_journal_stop function in fs/ext4/ext4_jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging improper access to a certain error field.

Affected products and versions

linux linux_kernel · 3.10.85 → 3.12
linux linux_kernel · 3.12.46 → 3.12.52
linux linux_kernel · 3.14.49 → 3.14.59
linux linux_kernel · 3.18.20 → 3.18.54
linux linux_kernel · 4.1.4 → 4.1.15
linux linux_kernel · 4.2 → 4.2.8
linux linux_kernel · 4.3 → 4.3.3

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References