CVE-2015-8961
kernel: Use after free in __ext4_journal_stop
Severity
ModerateRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · October 18, 2015
Updated · November 21, 2025
Description
A flaw was found in the ext4 subsystem. This vulnerability is a use after free vulnerability was found in __ext4_journal_stop(). Attackers could abuse this to allow any code which attempts to deal with the journal failure to be mishandled or not fail at all. This could lead to data corruption or crashes.
Statement
This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6, 7 and MRG 2.x. This issue has been rated as having moderate security impact.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 7CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 · 6.2AV:L/AC:H/Au:N/C:C/I:C/A:C
CWE-416 · Use After Free