Security Advisory

CVE-2015-8324

4.6
MEDIUM

Vulnerability Description

The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.
Published Date May 2, 2016
Official Source NIST NVD Advisory