CVE-2015-8324
The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.
Date published : 2016-05-02
http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.34