CVE-2013-2015

The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems…

published April 29, 2013

CVSS
—
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00382 · 30.7th percentile
Published
2013-04-29T10:00Z
EPSS history
Timeline
  • 29 APR 10:00Z
    The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems…
    cvelistv5