CVE-2015-8839

kernel: ext4 filesystem page fault race condition with fallocate call.

Loading…

Severity

Moderate

Red Hat Product Security

4.7

CVSS 2.0

Review impact separately from score.

Published · March 31, 2016

Updated · November 2, 2026

Description

A flaw was found in the Linux kernel when attempting to "punch a hole" in files existing on an ext4 filesystem. When punching holes into a file races with the page fault of the same area, it is possible that freed blocks remain referenced from page cache pages mapped to process' address space.

Statement

This issue does not affect the Linux kernels as shipped with Red Hat Enterprise Linux 5 and 6.

This issue affects the Linux kernels as shipped with Red Hat Enterprise Linux 7 and MRG-2 kernels.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 2.0 · 4.7
AV:L/AC:M/Au:N/C:N/I:C/A:N

CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization