CVE-2013-2015: Medium severity linux kernel vulnerability
Published Apr 26, 2013
·Updated
Linux kernel built with an Ext4 file system is vulnerable to a system hang situation when [auto]mounting a non-journal filesystem with an orphan list to clear.
A user could use this flaw to stall the system resulting in DoS.
Upstream fix: ------------- -> https://git.kernel.org/linus/0e9a9a1ad619e7e987815d20262d36a2f95717ca
Other sources
The ext4orphandel function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/forphanextentsinode/image.gz test.
— MITRE
Affected Software
208 affected components
Linux Linux kernel<=3.7.2
Linux Linux kernel=3.0-rc1
Linux Linux kernel=3.0-rc2
Linux Linux kernel=3.0-rc3
Linux Linux kernel=3.0-rc4
Linux Linux kernel=3.0-rc5
Linux Linux kernel=3.0-rc6
Linux Linux kernel=3.0-rc7
Linux Linux kernel=3.0.1
Linux Linux kernel=3.0.2
Linux Linux kernel=3.0.3
Linux Linux kernel=3.0.4
Linux Linux kernel=3.0.5
Linux Linux kernel=3.0.6
Linux Linux kernel=3.0.7
Linux Linux kernel=3.0.8
Linux Linux kernel=3.0.9
Linux Linux kernel=3.0.10
Linux Linux kernel=3.0.11
Linux Linux kernel=3.0.12
Linux Linux kernel=3.0.13
Linux Linux kernel=3.0.14
Linux Linux kernel=3.0.15
Linux Linux kernel=3.0.16
Linux Linux kernel=3.0.17
Linux Linux kernel=3.0.18
Linux Linux kernel=3.0.19
Linux Linux kernel=3.0.20
Linux Linux kernel=3.0.21
Linux Linux kernel=3.0.22
Linux Linux kernel=3.0.23
Linux Linux kernel=3.0.24
Linux Linux kernel=3.0.25
Linux Linux kernel=3.0.26
Linux Linux kernel=3.0.27
Linux Linux kernel=3.0.28
Linux Linux kernel=3.0.29
Linux Linux kernel=3.0.30
Linux Linux kernel=3.0.31
Linux Linux kernel=3.0.32
Linux Linux kernel=3.0.33
Linux Linux kernel=3.0.34
Linux Linux kernel=3.0.35
Linux Linux kernel=3.0.36
Linux Linux kernel=3.0.37
Linux Linux kernel=3.0.38
Linux Linux kernel=3.0.39
Linux Linux kernel=3.0.40
Linux Linux kernel=3.0.41
Linux Linux kernel=3.0.42
Linux Linux kernel=3.0.43
Linux Linux kernel=3.0.44
Linux Linux kernel=3.0.45
Linux Linux kernel=3.0.46
Linux Linux kernel=3.0.47
Linux Linux kernel=3.0.48
Linux Linux kernel=3.0.49
Linux Linux kernel=3.0.50
Linux Linux kernel=3.0.51
Linux Linux kernel=3.0.52
Linux Linux kernel=3.0.53
Linux Linux kernel=3.0.54
Linux Linux kernel=3.0.55
Linux Linux kernel=3.0.56
Linux Linux kernel=3.0.57
Linux Linux kernel=3.0.58
Linux Linux kernel=3.0.59
Linux Linux kernel=3.0.60
Linux Linux kernel=3.0.61
Linux Linux kernel=3.0.62
Linux Linux kernel=3.0.63
Linux Linux kernel=3.0.64
Linux Linux kernel=3.0.65
Linux Linux kernel=3.0.66
Linux Linux kernel=3.0.67
Linux Linux kernel=3.0.68
Linux Linux kernel=3.1
Linux Linux kernel=3.1-rc1
Linux Linux kernel=3.1-rc2
Linux Linux kernel=3.1-rc3
Linux Linux kernel=3.1-rc4
Linux Linux kernel=3.1.1
Linux Linux kernel=3.1.2
Linux Linux kernel=3.1.3
Linux Linux kernel=3.1.4
Linux Linux kernel=3.1.5
Linux Linux kernel=3.1.6
Linux Linux kernel=3.1.7
Linux Linux kernel=3.1.8
Linux Linux kernel=3.1.9
Linux Linux kernel=3.1.10
Linux Linux kernel=3.2
Linux Linux kernel=3.2-rc2
Linux Linux kernel=3.2-rc3
Linux Linux kernel=3.2-rc4
Linux Linux kernel=3.2-rc5
Linux Linux kernel=3.2-rc6
Linux Linux kernel=3.2-rc7
Linux Linux kernel=3.2.1
Linux Linux kernel=3.2.2
Linux Linux kernel=3.2.3
Linux Linux kernel=3.2.4
Linux Linux kernel=3.2.5
Linux Linux kernel=3.2.6
Linux Linux kernel=3.2.7
Linux Linux kernel=3.2.8
Linux Linux kernel=3.2.9
Linux Linux kernel=3.2.10
Linux Linux kernel=3.2.11
Linux Linux kernel=3.2.12
Linux Linux kernel=3.2.13
Linux Linux kernel=3.2.14
Linux Linux kernel=3.2.15
Linux Linux kernel=3.2.16
Linux Linux kernel=3.2.17
Linux Linux kernel=3.2.18
Linux Linux kernel=3.2.19
Linux Linux kernel=3.2.20
Linux Linux kernel=3.2.21
Linux Linux kernel=3.2.22
Linux Linux kernel=3.2.23
Linux Linux kernel=3.2.24
Linux Linux kernel=3.2.25
Linux Linux kernel=3.2.26
Linux Linux kernel=3.2.27
Linux Linux kernel=3.2.28
Linux Linux kernel=3.2.29
Linux Linux kernel=3.2.30
Linux Linux kernel=3.3
Linux Linux kernel=3.3-rc1
Linux Linux kernel=3.3-rc2
Linux Linux kernel=3.3-rc3
Linux Linux kernel=3.3-rc4
Linux Linux kernel=3.3-rc5
Linux Linux kernel=3.3-rc6
Linux Linux kernel=3.3-rc7
Linux Linux kernel=3.3.1
Linux Linux kernel=3.3.2
Linux Linux kernel=3.3.3
Linux Linux kernel=3.3.4
Linux Linux kernel=3.3.5
Linux Linux kernel=3.3.6
Linux Linux kernel=3.3.7
Linux Linux kernel=3.3.8
Linux Linux kernel=3.4
Linux Linux kernel=3.4-rc1
Linux Linux kernel=3.4-rc2
Linux Linux kernel=3.4-rc3
Linux Linux kernel=3.4-rc4
Linux Linux kernel=3.4-rc5
Linux Linux kernel=3.4-rc6
Linux Linux kernel=3.4-rc7
Linux Linux kernel=3.4.1
Linux Linux kernel=3.4.2
Linux Linux kernel=3.4.3
Linux Linux kernel=3.4.4
Linux Linux kernel=3.4.5
Linux Linux kernel=3.4.6
Linux Linux kernel=3.4.7
Linux Linux kernel=3.4.8
Linux Linux kernel=3.4.9
Linux Linux kernel=3.4.10
Linux Linux kernel=3.4.11
Linux Linux kernel=3.4.12
Linux Linux kernel=3.4.13
Linux Linux kernel=3.4.14
Linux Linux kernel=3.4.15
Linux Linux kernel=3.4.16
Linux Linux kernel=3.4.17
Linux Linux kernel=3.4.18
Linux Linux kernel=3.4.19
Linux Linux kernel=3.4.20
Linux Linux kernel=3.4.21
Linux Linux kernel=3.4.22
Linux Linux kernel=3.4.23
Linux Linux kernel=3.4.24
Linux Linux kernel=3.4.25
Linux Linux kernel=3.4.26
Linux Linux kernel=3.4.27
Linux Linux kernel=3.4.28
Linux Linux kernel=3.4.29
Linux Linux kernel=3.4.30
Linux Linux kernel=3.4.31
Linux Linux kernel=3.4.32
Linux Linux kernel=3.5.1
Linux Linux kernel=3.5.2
Linux Linux kernel=3.5.3
Linux Linux kernel=3.5.4
Linux Linux kernel=3.5.5
Linux Linux kernel=3.5.6
Linux Linux kernel=3.5.7
Linux Linux kernel=3.6
Linux Linux kernel=3.6.1
Linux Linux kernel=3.6.2
Linux Linux kernel=3.6.3
Linux Linux kernel=3.6.4
Linux Linux kernel=3.6.5
Linux Linux kernel=3.6.6
Linux Linux kernel=3.6.7
Linux Linux kernel=3.6.8
Linux Linux kernel=3.6.9
Linux Linux kernel=3.6.10
Linux Linux kernel=3.6.11
Linux Linux kernel=3.7
Linux Linux kernel=3.7.1
redhat Enterprise Linux=5
redhat Enterprise Linux=6.0
redhat Enterprise MRG=2.0
Event History
Apr 26, 2013
Data Sourced
via Red Hat·11:58 AM
DescriptionSeverityAffected Software
Apr 29, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2015?
CVE-2013-2015 has a severity rating that indicates a denial of service risk due to system hang situations when mounting affected file systems.
2
How do I fix CVE-2013-2015?
To mitigate CVE-2013-2015, ensure you update your Linux Kernel to version 3.7.2 or higher where the vulnerability is patched.
3
What systems are affected by CVE-2013-2015?
CVE-2013-2015 affects Linux kernel versions up to and including 3.7.2 across specific distributions.
4
What are the implications of CVE-2013-2015?
Exploiting CVE-2013-2015 can lead to a denial of service condition, causing the system to hang when handling specific file systems.
5
When was CVE-2013-2015 reported?
CVE-2013-2015 was publicly disclosed in April 2013, highlighting its existence and the potential impacts on affected systems.