CVE-2015-0275

Name: CVE-2015-0275
Creator: NVD / NIST
Published: 2015-10-19T10:59:00.113+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.46%

Last modified Jun 17, 2026

CVE-2015-0275 is a vulnerability of currently unknown severity. The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request.. EPSS estimates a 0.46% chance of exploitation in the next 30 days.

Description

The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request.

Metrics

EPSS Probability

0.46%

36.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-17

Affected Software

Vendor	Product	Versions
Linux	Linux Kernel	<= 4.0.5
Oracle	Linux	7

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2af21aae11972fa924374ddcf52e88347cf5a8Patch, Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1778.html
http://rhn.redhat.com/errata/RHSA-2015-1787.html
http://www.openwall.com/lists/oss-security/2015/02/23/14Patch, Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlThird Party Advisory
http://www.securityfocus.com/bid/75139Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1034454Third Party Advisory, VDB Entry
http://www.spinics.net/lists/linux-ext4/msg47193.htmlPatch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1193907Issue Tracking
https://github.com/torvalds/linux/commit/0f2af21aae11972fa924374ddcf52e88347cf5a8Patch
https://support.f5.com/csp/article/K05211147
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2af21aae11972fa924374ddcf52e88347cf5a8Patch, Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1778.html
http://rhn.redhat.com/errata/RHSA-2015-1787.html
http://www.openwall.com/lists/oss-security/2015/02/23/14Patch, Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlThird Party Advisory
http://www.securityfocus.com/bid/75139Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1034454Third Party Advisory, VDB Entry
http://www.spinics.net/lists/linux-ext4/msg47193.htmlPatch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1193907Issue Tracking
https://github.com/torvalds/linux/commit/0f2af21aae11972fa924374ddcf52e88347cf5a8Patch
https://support.f5.com/csp/article/K05211147

Timeline

Published: Oct 19, 2015
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2015-0275?

The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request.

How severe is CVE-2015-0275?

Severity scoring for CVE-2015-0275 is pending analysis. The EPSS model estimates a 0.46% probability of exploitation in the next 30 days.

How do I fix CVE-2015-0275?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-0275?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST