CVE-2015-8374

Published: Dec 28, 2015Modified: May 6, 2026

4.0

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.5 / Impact: 1.4

Source: NVD

Description

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action.

Affected (1)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 4.3.2

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (42)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0305cd5f7fca85dae392b9ba85b116896eb7c1c7

Source: cve@mitre.org

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-2574.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-2584.html

Source: cve@mitre.org

http://www.debian.org/security/2015/dsa-3426

Source: cve@mitre.org

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2015/11/27/2

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/78219

Source: cve@mitre.org

http://www.securitytracker.com/id/1034895

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2886-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2887-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2887-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2888-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2889-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2889-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2890-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2890-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2890-3

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=1286261

Source: cve@mitre.org

https://github.com/torvalds/linux/commit/0305cd5f7fca85dae392b9ba85b116896eb7c1c7

Source: cve@mitre.org

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0305cd5f7fca85dae392b9ba85b116896eb7c1c7