CVE-2015-8952: linux linux_kernel Data Processing Errors
Vulnerability summary
CVE-2015-8952 is a medium (CVSS 5.5) Data Processing Errors vulnerability in linux linux_kernel. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 39.4% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2 · Related 2Timeline
- 16-10-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.45%
Chance of exploitation in the next 30 days
Percentile
39%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.45% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu18 products
- linuxAll versions (No fix recorded) | < 4.4.0-116.140
- linux-aws< 4.4.0-1014.14 | < 4.4.0-1052.61
- linux-azure-6.11All versions (No fix recorded)
- linux-azure-fdeAll versions (No fix recorded)
- linux-azure-fde-5.15All versions (No fix recorded)
Debian1 product
- linux< 4.6.1-1
Linux1 product
- linux_kernel≤ 4.5.7
3 vendors · 20 products
References
19 links- bugzilla.redhat.com/show_bug.cgi?id=1360968X Refsource CONFIRMIssue TrackingThird Party AdvisoryVDB Entry
- github.com/torvalds/linux/commit/f9a61eb4e2471c56a63cd804c7474128138c38acX Refsource CONFIRMIssue Tracking
- github.com/torvalds/linux/commit/82939d7999dfc1f1998c4b1c12e2f19edbdff272X Refsource CONFIRMVendor Advisory
- www.openwall.com/lists/oss-security/2016/08/25/4Mailing ListX Refsource MLISTPatchThird Party Advisory
- github.com/torvalds/linux/commit/be0726d33cb8f411945884664924bed3cb8c70eeX Refsource CONFIRMIssue TrackingPatch
