NetSight
IP …
high7.8

CVE-2015-8961

The __ext4_journal_stop function in fs/ext4/ext4_jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a denial of service (us…

Impact

The __ext4_journal_stop function in fs/ext4/ext4_jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging improper access to a certain error field.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.10.85 before 3.12
from 3.12.46 before 3.12.52
from 3.14.49 before 3.14.59
from 3.18.20 before 3.18.54
from 4.1.4 before 4.1.15
from 4.2 before 4.2.8

Weakness classification

CWE-416

References