Medium severity5.5NVD Advisory· Published Oct 16, 2016· Updated Jun 17, 2026

CVE-2015-8953

Description

fs/overlayfs/copy_up.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of service (dentry reference leak) via filesystem operations on a large file in a lower overlayfs layer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <=4.2.5
- (no CPE)range: <4.2.6

Patches

Vulnerability mechanics

References

github.com/torvalds/linux/commit/ab79efab0a0ba01a74df782eb7fa44b044dae8b5nvdPatch
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/nvdExploitPatchVendor Advisory
www.openwall.com/lists/oss-security/2016/08/23/9nvdExploitThird Party Advisory
www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.6nvdRelease NotesVendor Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/92611nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000