PT-2014-8619 · Linux+5 · Linux Kernel+5

Al Viro

·

Published

2014-11-10

·

Updated

2020-08-13

·

CVE-2014-8559

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.17.3
Description The issue is related to the d walk function in fs/dcache.c, which does not properly maintain the semantics of rename lock. This allows local users to cause a denial of service, resulting in a deadlock and system hang, via a crafted application.
Recommendations For Linux kernel versions prior to 3.17.3, update to version 3.17.3 or later to resolve the issue.

Exploit

Fix

DoS

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-400

Related Identifiers

ALT-PU-2014-2361
ALT-PU-2015-1794
CESA-2015_1978
CVE-2014-8559
DSA-3170-1
OPENSUSE-SU-2015_0713-1
OPENSUSE-SU-2015_0714-1
RHSA-2015:1976
RHSA-2015:1977
RHSA-2015:1978
RHSA-2015_1977
RHSA-2015_1978
SUSE-RU-2015:0621-1
SUSE-SU-2015:0481-1
SUSE-SU-2015:0529-1
SUSE-SU-2015:0581-1
SUSE-SU-2015:0736-1
SUSE-SU-2015:1174-1
SUSE-SU-2015:1376-1
USN-2492-1
USN-2493-1
USN-2515-1
USN-2516-1
USN-2516-2
USN-2516-3
USN-2517-1
USN-2518-1

Affected Products

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu