CVE-2015-8324: Linux Kernel

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.

Affected products

• Linux Linux Kernel: up to and including 2.6.33.20

Published 2016-05-02. Last modified 2026-06-17.