CVE-2015-8324
The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the...
4.6 MediumFix available
The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
0.43%Down 0.7 points since Feb 4, 2022
What each source reports
NVD Score used
The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.
- Record
CVE-2015-8324- CVSS 3.0
- 4.6 Medium
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.
- Record
CVE-2015-8324- Updated
- 2026-11-02
EUVDEUVD-2015-8208 No score
The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.
- Record
EUVD-2015-8208- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f6x7-vppw-cjgq
The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the...
The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.
- Record
GHSA-f6x7-vppw-cjgq- CVSS 3.0
- 4.6 Medium
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.
- Record
CVE-2015-8324- CVSS 3.0
- 4.6 Medium
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-8324
The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.
- Record
DEBIAN-CVE-2015-8324- CVSS 3.0
- 4.6 Medium
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2016:0855
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2016:0855- CVSS 3.0
- 8.4 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-8324
The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.
- Record
UBUNTU-CVE-2015-8324- CVSS 3.0
- 4.6 Medium
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 2.6.37-1 | 2.6.37-1 |
linuxDebian:13 |
before 2.6.37-1 | 2.6.37-1 |
linuxDebian:14 |
before 2.6.37-1 | 2.6.37-1 |
linux-2.6Debian:6.0 From an advisory covering 5 CVEs |
before 2.6.32-48squeeze17, plus listed versions 2.6.32-302.6.32-30+m68k.52.6.32-312.6.32-31~bpo50+12.6.32-32 Show 37 moreShow less2.6.32-332.6.32-342.6.32-34squeeze12.6.32-352.6.32-35squeeze12.6.32-35squeeze22.6.32-35~bpo50+12.6.32-362.6.32-372.6.32-382.6.32-392.6.32-39squeeze12.6.32-402.6.32-412.6.32-41squeeze22.6.32-422.6.32-432.6.32-442.6.32-452.6.32-462.6.32-46squeeze12.6.32-472.6.32-482.6.32-48squeeze12.6.32-48squeeze102.6.32-48squeeze112.6.32-48squeeze122.6.32-48squeeze132.6.32-48squeeze142.6.32-48squeeze162.6.32-48squeeze32.6.32-48squeeze42.6.32-48squeeze52.6.32-48squeeze62.6.32-48squeeze72.6.32-48squeeze82.6.32-48squeeze9 |
2.6.32-48squeeze17 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
python-perfRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
Show 64 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernelRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debugRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-develRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-docRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-headersRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
perfRed Hat:enterprise_linux:6::client From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
python-perfRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernelRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
perfRed Hat:enterprise_linux:6::computenode From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
python-perfRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernelRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debugRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-develRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-docRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-headersRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
perfRed Hat:enterprise_linux:6::server From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
python-perfRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernelRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
perfRed Hat:enterprise_linux:6::workstation From an advisory covering 10 CVEs |
before 0:2.6.32-642.el6 | 0:2.6.32-642.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-8324 is a medium vulnerability (CVSS 4.6) in Linux Kernel, published December 6, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in linux 2.6.37-1.
References
rhn.redhat.com/errata/RHSA-2016-0855.html
oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
bugzilla.redhat.com/show_bug.cgi?id=1267261
mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.34
github.com/torvalds/linux/commit/744692dc059845b2a3022119871846e74d4f6e11
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit?id=744692dc059845b2a3022119871846e74d4f6e11
Show 59 moreShow less
openwall.com/lists/oss-security/2015/11/23/2
nvd.nist.gov/vuln/detail/CVE-2015-8324
access.redhat.com/errata/RHSA-2016:0855
security-tracker.debian.org/tracker/CVE-2015-8324
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0855.json
cve.org/CVERecord?id=CVE-2010-5313
ubuntu.com/security/CVE-2015-8324
bugs.openvz.org/browse/OVZ-6541