CVE-2014-8559

Medium

Description

The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of service (deadlock and system hang) via a crafted application.

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedNov 10, 2014
First seenNov 10, 2014

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
linux linux_kernelv ≤ 3.17.2—
canonical ubuntu_linux12.04, 14.04, 14.10—
novell suse_linux_enterprise_desktop12.0—
novell suse_linux_enterprise_server12.0—
opensuse evergreen11.4—
opensuse opensuse13.1—
suse linux_enterprise_real_time_extension11—
suse linux_enterprise_software_development_kit12—
suse linux_enterprise_workstation_extension12—
suse suse_linux_enterprise_server11—
oracle linux7—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.