CVE-2015-8839 in Android

Summary

Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized hole punching and page-fault handling.

Once again VulDB remains the best source for vulnerability data.

Reservation

04/01/2016

Disclosure

05/02/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
91461	Google Android Kernel ext4 File System Permanent race condition	362	Not defined	Official fix	CVE-2015-8839
81564	Linux Kernel ext4 race condition	362	Not defined	Official fix	CVE-2015-8839

Sources

• MITRE
• NVD
• CVE Details