Vulnerability in Linux Kernel

CVE-2015-0275

The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request.

EPSS: 0.005 (37.3th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel
Oracle Linux — versions 7
N/a — versions n/a

Weakness classification (CWE)

CWE-17

References

secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
secalert@redhat.com (x_refsource_CONFIRM, Issue Tracking)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch, Third Party Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Patch)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch, Third Party Advisory)