Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2015-8374

13
FAUCET Score

CVE-2015-8374 describes a vulnerability in the Linux kernel's Btrfs filesystem, specifically affecting versions prior to 4.3.3. This flaw allows local users to access sensitive pre-truncation data from files through a crafted clone action due to improper handling of compressed inline extents. Rated as Medium severity (CVSS 4.0), it has a low attack complexity and requires local access, with a potential impact of information disclosure. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
<= 4.3.2CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

4.0MEDIUM

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
2.5
Impact Score
1.4
CvssVersion
3.0

Exploit Intelligence

EPSS Score
0.50%
Probability of exploitation in next 30 days
EPSS Percentile
39.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0050 is in the 76th percentile among its peer group of 3,052 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (4)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt-0:3.10.0-514.rt56.420.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-0:3.10.0-514.el7
View patch
redhatno patchvia redhat_api
Product: Red Hat Enterprise MRG 2Fixed in: realtime-kernel
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: kernel

Vendor Advisories (1)

redhatCVE-2015-8374Moderate

kernel: Information leak when truncating of compressed/inlined extents on BTRFS

Oct 16, 2015

References

git.kernel.org / cgit/linux/kernel/git/torvalds/linux.git/commit
Vendor Advisory
rhn.redhat.com / errata/RHSA-2016-2574.html
rhn.redhat.com / errata/RHSA-2016-2584.html
bugzilla.redhat.com / show_bug.cgi
github.com / torvalds/linux/commit/0305cd5f7fca85dae392b9ba85b116896eb7c1c7
debian.org / security/2015/dsa-3426
kernel.org / pub/linux/kernel/v4.x/ChangeLog-4.3.3
openwall.com / lists/oss-security/2015/11/27/2
oracle.com / technetwork/topics/security/linuxbulletinoct2016-3090545.html
oracle.com / technetwork/topics/security/ovmbulletinoct2016-3090547.html
securityfocus.com / bid/78219
securitytracker.com / id/1034895
ubuntu.com / usn/USN-2886-1
ubuntu.com / usn/USN-2887-1
ubuntu.com / usn/USN-2887-2
ubuntu.com / usn/USN-2888-1
ubuntu.com / usn/USN-2889-1
ubuntu.com / usn/USN-2889-2
ubuntu.com / usn/USN-2890-1
ubuntu.com / usn/USN-2890-2
ubuntu.com / usn/USN-2890-3