UBUNTU-CVE-2015-8374
Moderate
UBUNTU-CVE-2015-8374
fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action.
Exploit probability
Not scored
Published
December 28, 2015
Required by
Not available
Last source change
April 22, 2026
02 / AFFECTED SOFTWARE
Affected packages
84 explicit affected versions
34 explicit affected versions
19 explicit affected versions
6 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
UBUNTU-CVE-2015-8374
View original source
fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action.
05 / REFERENCES
Further evidence
- http://www.openwall.com/lists/oss-security/2015/11/27/2
- https://ubuntu.com/security/CVE-2015-8374
- https://ubuntu.com/security/notices/USN-2886-1
- https://ubuntu.com/security/notices/USN-2886-2
- https://ubuntu.com/security/notices/USN-2887-1
- https://ubuntu.com/security/notices/USN-2887-2
- https://ubuntu.com/security/notices/USN-2888-1
- https://ubuntu.com/security/notices/USN-2889-1
- https://ubuntu.com/security/notices/USN-2889-2
- https://ubuntu.com/security/notices/USN-2890-1
- https://ubuntu.com/security/notices/USN-2890-2
- https://ubuntu.com/security/notices/USN-2890-3
- https://www.cve.org/CVERecord?id=CVE-2015-8374