CVE Database›CVE-2015-8961

CVE-2015-8961

kernel: Use after free in __ext4_journal_stop

Loading…

Severity

Moderate

Red Hat Product Security

7

CVSS 3.0

Review impact separately from score.

Published · October 18, 2015

Updated · November 21, 2025

Description

A flaw was found in the ext4 subsystem. This vulnerability is a use after free vulnerability was found in __ext4_journal_stop(). Attackers could abuse this to allow any code which attempts to deal with the journal failure to be mishandled or not fail at all. This could lead to data corruption or crashes.

Statement

This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6, 7 and MRG 2.x. This issue has been rated as having moderate security impact.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0 · 6.2
AV:L/AC:H/Au:N/C:C/I:C/A:C

CWE-416 · Use After Free