{"id":"CVE-2015-0274","aliases":["DEBIAN-CVE-2015-0274","EUVD-2015-0288","GHSA-65mm-97qv-fxq8","RHSA-2015:0290","RHSA-2015:0694","UBUNTU-CVE-2015-0274","USN-2544-1"],"status":"published","title":"The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during...","description":"The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00439,"percentile":0.38399,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-19"],"published":"2015-03-16T00:00:00Z","modified":"2026-09-09T06:47:28Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["3.11.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["3.11.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["3.11.5-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-48.80"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.5-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.144.el6rt"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-48.80"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-48.80"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79"],"bundled":8}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-2544-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://github.com/torvalds/linux/commit/8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0694.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0290.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1195248","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"http://www.securitytracker.com/id/1031853","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2543-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0274","tags":["advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59"},{"url":"https://github.com/advisories/GHSA-65mm-97qv-fxq8"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-0274","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0290","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/articles/1352803","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=915335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=968147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1043379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1050834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1058608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1065474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1067126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1068627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1071340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1074747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1078775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1079841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1080894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1086058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1088784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1091818","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1095099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1102641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1110523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1115201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1117542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1119662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1124880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1131552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1141399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1151353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1161565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1164266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1173580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1182059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1198457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1198503","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0290.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3690","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3690","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3690","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3940","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3940","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3940","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-7825","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-7825","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7825","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-7826","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-7826","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7826","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8086","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8086","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8086","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8160","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8172","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8172","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8172","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8173","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8173","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8173","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8709","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8709","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8884","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0274","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0274","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0694","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1163792","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1169755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1171363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1172844","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0694.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-7822","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-7822","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7822","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-0274","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2543-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2544-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2013-7421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-7822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9728","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9729","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9731","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-0274","description":"The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.","status":"published","published":"2015-03-16T10:00:00Z","modified":"2024-08-06T04:03:10.95Z","updated_at":"2026-11-02T14:35:45.088047Z"}],"euvd":[{"id":"EUVD-2015-0288","description":"The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.","status":"published","published":"2015-03-16T10:00:00Z","modified":"2024-08-06T04:03:10Z","updated_at":"2026-11-03T02:22:20.481932Z"}],"ghsa":[{"id":"GHSA-65mm-97qv-fxq8","title":"The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during...","description":"The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.","status":"published","published":"2022-05-17T04:14:26Z","modified":"2023-02-13T03:31:14Z","updated_at":"2026-11-02T14:54:05.992759Z"}],"nvd":[{"id":"CVE-2015-0274","description":"The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.","status":"published","published":"2015-03-16T10:59:05.007Z","modified":"2026-06-17T00:19:53.437Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-19"],"updated_at":"2026-11-02T14:03:03.313464Z"}],"osv":[{"id":"RHSA-2015:0290","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:02:10Z","modified":"2026-06-26T12:21:48.482366492Z","cvss":[{"version":"3.0","score":6.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2015:0694","title":"Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update","status":"published","published":"2024-09-13T10:11:24Z","modified":"2025-11-22T10:59:10Z","cvss":[{"version":"3.0","score":6.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"CVE-2015-0274","description":"The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.","status":"published","published":"2015-03-16T10:59:05Z","modified":"2026-04-10T03:45:02.29485Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2015-0274","description":"The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.","status":"published","published":"2015-03-16T10:59:05.007Z","modified":"2026-09-09T06:47:28.651743998Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"UBUNTU-CVE-2015-0274","description":"The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.","status":"published","published":"2015-03-16T00:00:00Z","modified":"2026-04-22T10:00:09.881378Z","updated_at":"2026-11-02T15:54:09.721803Z"},{"id":"USN-2544-1","title":"linux vulnerabilities","description":"\nEric Windisch discovered flaw in how the Linux kernel's XFS file system\nreplaces remote attributes. A local access with access to an XFS file\nsystem could exploit this flaw to escalate their privileges.\n(CVE-2015-0274)\n\nA flaw was discovered in the automatic loading of modules in the crypto\nsubsystem of the Linux kernel. A local user could exploit this flaw to load\ninstalled kernel modules, increasing the attack surface and potentially\nusing this to gain administrative privileges. (CVE-2013-7421)\n\nThe Linux kernel's splice system call did not correctly validate its\nparameters. A local, unprivileged user could exploit this flaw to cause a\ndenial of service (system crash). (CVE-2014-7822)\n\nA flaw was discovered in the crypto subsystem when screening module names\nfor automatic module loading if the name contained a valid crypto module\nname, eg. vfat(aes). A local user could exploit this flaw to load installed\nkernel modules, increasing the attack surface and potentially using this to\ngain administrative privileges. (CVE-2014-9644)\n\nCarl H Lunde discovered that the UDF file system (CONFIG_UDF_FS) failed to\nverify symlink size info. A local attacker, who is able to mount a malicous\nUDF file system image, could exploit this flaw to cause a denial of service\n(system crash) or possibly cause other undesired behaviors. (CVE-2014-9728)\n\nCarl H Lunde discovered that the UDF file system (CONFIG_UDF_FS) did not\nvalid inode size information . A local attacker, who is able to mount a\nmalicous UDF file system image, could exploit this flaw to cause a denial\nof service (system crash) or possibly cause other undesired behaviors.\n(CVE-2014-9729)\n\nCarl H Lunde discovered that the UDF file system (CONFIG_UDF_FS) did not\ncorrectly verify the component length for symlinks. A local attacker, who\nis able to mount a malicous UDF file system image, could exploit this flaw\nto cause a denial of service (system crash) or possibly cause other\nundesired behaviors. (CVE-2014-9730)\n\nCarl H Lunde discovered an information leak in the UDF file system\n(CONFIG_UDF_FS). A local attacker, who is able to mount a malicous UDF file\nsystem image, could exploit this flaw to read potential sensitve kernel\nmemory. (CVE-2014-9731)\n","status":"published","published":"2015-03-24T09:22:29Z","modified":"2026-04-22T09:09:08.290615Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}