cve/2015/CVE-2015-8324.md
2024-06-18 02:51:15 +02:00

838 B

CVE-2015-8324

Description

The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.

POC

Reference

Github