Oval Definition:oval:com.ubuntu.xenial:def:20158952000
Revision Date:2016-10-16Version:1
Title:CVE-2015-8952 on Ubuntu 16.04 LTS (xenial) - medium.
Description:The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba. Laurent Guerby discovered that the mbcache feature in the ext2 and ext4 filesystems in the Linux kernel improperly handled xattr block caching. A local attacker could use this to cause a denial of service.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2015-8952
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND Package Information
  • The 'linux' package in xenial was vulnerable but has been fixed (note: '4.4.0-116.140').
  • OR The 'linux-aws' package in xenial was vulnerable but has been fixed (note: '4.4.0-1052.61').
  • OR NOT While related to the CVE in some way, the 'linux-aws-hwe' package in xenial is not affected (note: '4.15.0-1030.31~16.04.1').
  • OR NOT While related to the CVE in some way, the 'linux-azure' package in xenial is not affected (note: '4.11.0-1009.9').
  • OR NOT While related to the CVE in some way, the 'linux-azure-edge' package in xenial is not affected (note: '4.11.0-1009.9').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'was needed ESM criteria').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned').
  • OR NOT While related to the CVE in some way, the 'linux-gcp' package in xenial is not affected (note: '4.10.0-1004.4').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'was needed now end-of-life').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned').
  • OR NOT While related to the CVE in some way, the 'linux-hwe' package in xenial is not affected (note: '4.8.0-36.36~16.04.1').
  • OR NOT While related to the CVE in some way, the 'linux-hwe-edge' package in xenial is not affected (note: '4.8.0-36.36~16.04.1').
  • OR The 'linux-kvm' package in xenial was vulnerable but has been fixed (note: '4.4.0-1019.24').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned').
  • OR NOT While related to the CVE in some way, the 'linux-oem' package in xenial is not affected (note: '4.13.0-1008.9').
  • OR NOT While related to the CVE in some way, the 'linux-oracle' package in xenial is not affected (note: '4.15.0-1007.9~16.04.1').
  • OR The 'linux-raspi2' package in xenial was vulnerable but has been fixed (note: '4.4.0-1085.93').
  • OR The 'linux-snapdragon' package in xenial was vulnerable but has been fixed (note: '4.4.0-1087.92').
  • BACK