CVE-2015-8374: Linux Kernel

Medium severity, CVSS 4.0. EPSS: 0.5% chance of exploitation in the next 30 days.

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action.

Affected products

• Linux Linux Kernel: up to and including 4.3.2

Published 2015-12-28. Last modified 2026-06-17.