Vulnerability Name:

CVE-2015-8839 (CCN-114520)

Assigned:2015-12-07
Published:2015-12-07
Updated:2020-10-02
Summary:Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized hole punching and page-fault handling.
CVSS v3 Severity:5.1 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
4.5 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
6.2 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
5.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:1.9 Low (CVSS v2 Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
4.9 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
4.7 Medium (REDHAT CVSS v2 Vector: AV:L/AC:M/Au:N/C:N/I:C/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Complete
Availibility (A): None
Vulnerability Type:CWE-362
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2015-8839

Source: CCN
Type: Linux Kernel GIT Repository
ext4: fix races between page faults and hole punching

Source: CONFIRM
Type: Vendor Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ea3d7209ca01da209cda6f0dea8be9cc4b7a933b

Source: CCN
Type: IBM Security Bulletin T1026731 (PowerKVM)
Vulnerabilities in the Linux kernel affect PowerKVM

Source: CCN
Type: IBM Security Bulletin 2011746 (QRadar Network Security)
IBM QRadar Network Security is affected by vulnerabilities in Linux kernel

Source: MLIST
Type: Mailing List, Third Party Advisory
[oss-security] 20160401 Re: ext4 data corruption due to punch hole races

Source: BID
Type: Third Party Advisory, VDB Entry
85798

Source: CCN
Type: BID-85798
Linux Kernel CVE-2015-8839 Local Security Bypass Vulnerability

Source: SECTRACK
Type: Third Party Advisory, VDB Entry
1035455

Source: UBUNTU
Type: Third Party Advisory
USN-3005-1

Source: UBUNTU
Type: Third Party Advisory
USN-3006-1

Source: UBUNTU
Type: Third Party Advisory
USN-3007-1

Source: REDHAT
Type: Third Party Advisory
RHSA-2017:1842

Source: REDHAT
Type: Third Party Advisory
RHSA-2017:2077

Source: REDHAT
Type: Third Party Advisory
RHSA-2017:2669

Source: CCN
Type: Red Hat Bugzilla – Bug 1323577
(CVE-2015-8839) CVE-2015-8839 kernel: ext4 filesystem page fault race condition with fallocate call

Source: CONFIRM
Type: Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1323577

Source: XF
Type: UNKNOWN
linux-kernel-cve20158839-dos(114520)

Source: CONFIRM
Type: Third Party Advisory
https://github.com/torvalds/linux/commit/ea3d7209ca01da209cda6f0dea8be9cc4b7a933b

Source: MLIST
Type: Third Party Advisory
[debian-lts-announce] 20200609 [SECURITY] [DLA 2241-1] linux security update

Source: MLIST
Type: Third Party Advisory
[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update

Vulnerable Configuration:Configuration 1:
  • cpe:/o:linux:linux_kernel:*:*:*:*:*:*:*:* (Version <= 4.4.221)
  • OR cpe:/o:linux:linux_kernel:4.5:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.5:rc2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.5:rc3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.5:rc4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.5:rc5:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.5:rc6:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.5:rc7:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
  • OR cpe:/o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:7:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:7::client:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:7::computenode:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:7::server:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:7::workstation:*:*:*:*:*

    • Configuration RedHat 6:
  • cpe:/a:redhat:rhel_extras_rt:7:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • AND
  • cpe:/a:ibm:powerkvm:3.1:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:qradar_network_security:5.4:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:com.redhat.rhsa:def:20171842
    P
    		RHSA-2017:1842: kernel security, bug fix, and enhancement update (Important)
    2017-08-01
    oval:com.redhat.rhsa:def:20172077
    P
    		RHSA-2017:2077: kernel-rt security, bug fix, and enhancement update (Important)
    2017-08-01
    oval:com.ubuntu.xenial:def:20158839000
    V
    		CVE-2015-8839 on Ubuntu 16.04 LTS (xenial) - medium.
    2016-05-02
    oval:com.ubuntu.disco:def:201588390000000
    V
    		CVE-2015-8839 on Ubuntu 19.04 (disco) - medium.
    2016-05-02
    oval:com.ubuntu.cosmic:def:20158839000
    V
    		CVE-2015-8839 on Ubuntu 18.10 (cosmic) - medium.
    2016-05-02
    oval:com.ubuntu.cosmic:def:201588390000000
    V
    		CVE-2015-8839 on Ubuntu 18.10 (cosmic) - medium.
    2016-05-02
    oval:com.ubuntu.precise:def:20158839000
    V
    		CVE-2015-8839 on Ubuntu 12.04 LTS (precise) - medium.
    2016-05-02
    oval:com.ubuntu.bionic:def:201588390000000
    V
    		CVE-2015-8839 on Ubuntu 18.04 LTS (bionic) - medium.
    2016-05-02
    oval:com.ubuntu.artful:def:20158839000
    V
    		CVE-2015-8839 on Ubuntu 17.10 (artful) - medium.
    2016-05-02
    oval:com.ubuntu.trusty:def:20158839000
    V
    		CVE-2015-8839 on Ubuntu 14.04 LTS (trusty) - medium.
    2016-05-02
    oval:com.ubuntu.xenial:def:201588390000000
    V
    		CVE-2015-8839 on Ubuntu 16.04 LTS (xenial) - medium.
    2016-05-02
    oval:com.ubuntu.bionic:def:20158839000
    V
    		CVE-2015-8839 on Ubuntu 18.04 LTS (bionic) - medium.
    2016-05-02
    BACK
    linux linux kernel *
    linux linux kernel 4.5 rc1
    linux linux kernel 4.5 rc2
    linux linux kernel 4.5 rc3
    linux linux kernel 4.5 rc4
    linux linux kernel 4.5 rc5
    linux linux kernel 4.5 rc6
    linux linux kernel 4.5 rc7
    canonical ubuntu linux 14.04
    canonical ubuntu linux 16.04
    linux linux kernel *
    ibm powerkvm 3.1
    ibm qradar network security 5.4