The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 16, 2016 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 4, 2017 | Aug 22, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 22, 2016 |
| Ubuntu | — | Upgrade linux-image-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-116-genericUpgrade linux-image-4.4.0-1085-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-116-powerpc-smpUpgrade linux-image-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-116-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1052-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-116-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-4.4.0-1087-snapdragonUpgrade linux-image-4.4.0-116-powerpc-e500mcUpgrade linux-image-4.4.0-116-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1019-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-116-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1014-aws | Feb 23, 2018 | Oct 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub