CVE-2015-8961: The __ext4_journal_stop function in fs/ext4/ext4_jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a denial of service…

PriorityP337high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

EPSS

2.00%

78.8th percentile

The __ext4_journal_stop function in fs/ext4/ext4_jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging improper access to a certain error field.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 4.3.3-1 (bookworm)	linux 4.3.3-1 (bookworm)
google	android	—	—
linux	linux_kernel	>= 0 < 4.3.3-1	4.3.3-1
linux	linux_kernel	>= 0 < 4.3.3-1	4.3.3-1
linux	linux_kernel	>= 0 < 4.3.3-1	4.3.3-1
linux	linux_kernel	>= 0 < 4.3.3-1	4.3.3-1
linux	linux_kernel	>= 3.10.85 < 3.12	3.12
linux	linux_kernel	>= 3.12.46 < 3.12.52	3.12.52
linux	linux_kernel	>= 3.14.49 < 3.14.59	3.14.59
linux	linux_kernel	>= 3.18.20 < 3.18.54	3.18.54
linux	linux_kernel	>= 4.1.4 < 4.1.15	4.1.15
linux	linux_kernel	>= 4.2 < 4.2.8	4.2.8
linux	linux_kernel	>= 4.3 < 4.3.3	4.3.3

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C

osv7.8HIGH

vendor_debian7.8HIGH

vendor_redhat7.8HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.