CVE-2013-2015
Fixed in a distro release EPSS <1%
The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test.
Products: linux_kernel, redhat enterprise_linux, redhat enterprise_mrg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 3.8-1 |
| Debian 13 | linux | 3.8-1 |
| Debian 14 | linux | 3.8-1 |
| Debian 6.0 | linux-2.6 | 2.6.32-48squeeze3 |
| Debian 7 | linux | 3.2.41-2+deb7u2 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-default | 3.0.101-0.7.40.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-ec2 | 3.0.101-0.7.40.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-pae | 3.0.101-0.7.40.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-source | 3.0.101-0.7.40.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-syms | 3.0.101-0.7.40.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-trace | 3.0.101-0.7.40.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | kernel-xen | 3.0.101-0.7.40.1 |