VDB
CVE-2015-8952
CVE-2015-8952
PUBLISHED
CVSS 5.5 MEDIUM
The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba.
EPSS 0.45% · 37.3th percentile
Risk Scores
CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.45%
37.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:20.04:LTS | linux-raspi2 | 5.4.0-1006.6, 5.4.0-1004.4, 5.3.0-1017.19 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | 0, 6.11.0-1008.8~24.04.1, * |
| Ubuntu:16.04:LTS | linux-aws | 4.4.0-1020.29, 4.4.0-1032.41, 4.4.0-1037.46 |
| Ubuntu:20.04:LTS | linux-azure-fde | 5.4.0-1074.77+cvm1.1, 5.4.0-1073.76+cvm1.1, 5.4.0-1072.75+cvm1.1 |
| Ubuntu:Pro:20.04:LTS | linux-azure-fde-5.15 | *, 5.15.0-1082.91~20.04.1.1, 5.15.0-1081.90~20.04.1.1 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | 0, *, 6.11.0-1015.16~24.04.2 |
| Ubuntu:18.04:LTS | linux-snapdragon | 0, 4.4.0-1081.86, 4.4.0-1079.84 |
| Ubuntu:14.04:LTS | linux-aws | 4.4.0-1010.10, 4.4.0-1009.9, 4.4.0-1012.12 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | 6.11.0-28.28~24.04.1, 6.11.0-29.29~24.04.1, 6.11.0-26.26~24.04.1 |
| Ubuntu:Pro:14.04:LTS | linux | 3.13.0-168.218, 3.13.0-184.235, 3.13.0-176.227 |
| Ubuntu:16.04:LTS | linux-snapdragon | 4.4.0-1050.54, 4.4.0-1072.77, 4.4.0-1067.72 |
| Ubuntu:20.04:LTS | linux-gke | 5.4.0-1049.52, 5.4.0-1046.48, 5.4.0-1044.46 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | 5.15.0-1073.75, 0 |
| Ubuntu:22.04:LTS | linux-realtime | 0, 5.15.0-1032.35 |
| Ubuntu:16.04:LTS | linux | 4.4.0-18.34, 0, 4.2.0-16.19 |
| Ubuntu:16.04:LTS | linux-raspi2 | 4.4.0-1074.82, 4.4.0-1075.83, 4.4.0-1076.84 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | 6.11.0-1015.15~24.04.1, 6.11.0-1016.16~24.04.1, * |
| Ubuntu:16.04:LTS | linux-kvm | 4.4.0-1010.15, 4.4.0-1004.9, 4.4.0-1017.22 |
| Ubuntu:22.04:LTS | linux-riscv | 5.15.0-1026.30, 5.15.0-1020.23, 5.15.0-1019.22 |
| Ubuntu:14.04:LTS | linux-lts-xenial | 4.4.0-21.37~14.04.1, 4.4.0-15.31~14.04.1, 4.4.0-14.30~14.04.2 |
…and 3 more
Timeline
- Oct 16, 2016 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 30, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2015-8952 third-party-advisory
- http://seclists.org/oss-sec/2016/q3/378 third-party-advisory
- https://lwn.net/Articles/668718/ third-party-advisory
- https://ubuntu.com/security/notices/USN-3582-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-3582-2 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2015-8952 third-party-advisory