CVE-2015-0275: Medium severity linux kernel vulnerability
A flaw was found in the way the Linux kernel's EXT4 filesystem handled page size > block size condition when fallocate zero range functionality is used.
Acknowledgements:
This issue was discovered by Xiong Zhou of Red Hat.
Other sources
The ext4zerorange function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0275?
CVE-2015-0275 is rated as having medium severity due to its potential impact on file integrity.
How do I fix CVE-2015-0275?
To mitigate CVE-2015-0275, update the Linux kernel to version 4.0.5 or later.
Which systems are affected by CVE-2015-0275?
CVE-2015-0275 affects the Linux kernel prior to version 4.0.6, especially those using the EXT4 filesystem.
What functionality is exploited in CVE-2015-0275?
CVE-2015-0275 exploits a flaw in the fallocate zero range functionality when page size exceeds block size.
Who discovered CVE-2015-0275?
CVE-2015-0275 was discovered by Xiong Zhou of Red Hat.