CVE-2013-2015: The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle o...

Security readout for executives and security teams

CVE-2013-2015 is a Linux kernel ext4 denial-of-service flaw. A crafted filesystem on removable media can make affected systems hang when mounted. The issue is old and requires physical proximity or equivalent ability to present untrusted storage. Exposure is most likely on legacy Linux systems running kernels before 3.7.3, or vendor kernels without the backported fix, that mount untrusted removable ext4 media. Modern supported distributions are less likely exposed but should verify vendor backports. Treat this as a legacy and physical-access resilience issue, not an internet-scale emergency. Prioritize environments where untrusted USB or removable media can be mounted on older Linux systems, especially shared workstations or operational terminals. Mitigation focus: Update to Linux 3.7.3 or a vendor kernel containing the ext4 fix.; Check distribution advisories for backported fixes before judging by version alone.; Restrict automatic mounting of untrusted removable media on sensitive systems..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.