CVE-2014-8559

CVSS v3.1 5.5 (Medium)

CVSS v2.0 4.9 (Medium)

EPSS 0.06 % (26^th)

Affected Products 11

Advisories 37

The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of service (deadlock and system hang) via a crafted application.

Weaknesses

CWE-400: Uncontrolled Resource Consumption

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2014-11-10 11:55:09
(9 years ago)
Updated Date: 2020-08-13 17:42:43
(4 years ago)

Affected Products

Canonical

Ubuntu Linux

Linux

Linux Kernel

Novell

Opensuse

Oracle

Linux

Suse

Configuration #1

		CPE23	From	Up To
	Linux Kernel 3.17.2 and prior versions	cpe:2.3:o:linux:linux_kernel		<= 3.17.2

Configuration #2

		CPE23	From	Up To
	Canonical Ubuntu Linux 12.04	cpe:2.3:o:canonical:ubuntu_linux:12.04:::*:esm
	Canonical Ubuntu Linux 14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04:::*:esm
	Canonical Ubuntu Linux 14.10	cpe:2.3:o:canonical:ubuntu_linux:14.10

Configuration #3

		CPE23	From	Up To
	Novell Suse Linux Enterprise Desktop 12.0	cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0
	Novell Suse Linux Enterprise Server 12.0	cpe:2.3:o:novell:suse_linux_enterprise_server:12.0
	Opensuse Evergreen 11.4	cpe:2.3:o:opensuse:evergreen:11.4
	Opensuse 13.1	cpe:2.3:o:opensuse:opensuse:13.1
	Suse Linux Enterprise Real Time Extension 11 SP3	cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp3
	Suse Linux Enterprise Software Development Kit 12	cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-
	Suse Linux Enterprise Workstation Extension 12	cpe:2.3:o:suse:linux_enterprise_workstation_extension:12
	Suse Linux Enterprise Server 11 SP2	cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp2:::ltss

Configuration #4

		CPE23	From	Up To
	Oracle Linux 7	cpe:2.3:o:oracle:linux:7:-