The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 16, 2016 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 4, 2017 | Aug 22, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 22, 2016 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-116-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-116-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1019-kvmUpgrade linux-image-4.4.0-1014-awsUpgrade linux-image-4.4.0-1087-snapdragonUpgrade linux-image-4.4.0-116-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-4.4.0-116-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1052-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-116-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1085-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-116-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-116-powerpc-smp | Feb 23, 2018 | Oct 16, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub