DEBIAN-CVE-2015-8324

DEBIAN-CVE-2015-8324 PUBLISHED CVSS 4.599999904632568 MEDIUM

The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.

Risk Scores

CVSS v3.0

4.599999904632568

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:13	linux	0, 0, 0
Debian:12	linux	0, 0, 0
Debian:14	linux	0, 0, 0
Debian:11	linux	0, 0, 0

Timeline

May 2, 2016 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2015-8324 advisory

Open in Interactive Console →