NVD

Id
28943  
Name
CVE-2015-8952  
Description
The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-10-16  
Modified Date
2016-10-17  
Seq
2015-8952  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152571 28943 CVE-2015-8952 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=82939d7999dfc1f1998c4b1c12e2f19edbdff272  View
152572 28943 CVE-2015-8952 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=be0726d33cb8f411945884664924bed3cb8c70ee  View
152573 28943 CVE-2015-8952 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f9a61eb4e2471c56a63cd804c7474128138c38ac  View
152574 28943 CVE-2015-8952 [oss-security] 20160822 CVE request: Linux kernel mbcache lock contention denial of service.  View
152575 28943 CVE-2015-8952 [oss-security] 20160825 Re: CVE request: Linux kernel mbcache lock contention denial of service.  View
152576 28943 CVE-2015-8952 https://bugzilla.kernel.org/show_bug.cgi?id=107301  View
152577 28943 CVE-2015-8952 https://bugzilla.redhat.com/show_bug.cgi?id=1360968  View
152578 28943 CVE-2015-8952 https://github.com/torvalds/linux/commit/82939d7999dfc1f1998c4b1c12e2f19edbdff272  View
152579 28943 CVE-2015-8952 https://github.com/torvalds/linux/commit/be0726d33cb8f411945884664924bed3cb8c70ee  View
152580 28943 CVE-2015-8952 https://github.com/torvalds/linux/commit/f9a61eb4e2471c56a63cd804c7474128138c38ac  View
152581 28943 CVE-2015-8952 https://lwn.net/Articles/668718/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11967 JVNDB-2015-007288 Linux Kernel の ext2 および ext4 ファイルシステムの実装の mbcache 機能におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の ext2 および ext4 ファイルシステムの実装の mbcache 機能は、xattr ブロックキャッシングを誤って処理するため、サービス運用妨害 (ソフトロックアップ) 状態にされる脆弱性が存在します。 CVE-2015-8952 86177 CVE-2015-8952 28943 2.1 5.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007288.html 2015-11-05 2016-10-20 View