CVE-2014-8086

MEDIUM

4.7

Description

Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a write action and an F_SETFL fcntl operation for the O_DIRECT flag.

Details CVE

Score CVSS v3.14.7

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Vecteur d'attaqueLOCAL

ComplexiteHIGH

Privileges requisLOW

Interaction utilisateurNONE

Publie10/13/2014

Derniere modification4/12/2025

Sourcenvd

Observations honeypot0

Produits affectes

linux:linux_kernelsuse:suse_linux_enterprise_server

Faiblesses (CWE)

CWE-362

References

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html(cve@mitre.org)

http://rhn.redhat.com/errata/RHSA-2015-0290.html(cve@mitre.org)

http://rhn.redhat.com/errata/RHSA-2015-0694.html(cve@mitre.org)

http://www.openwall.com/lists/oss-security/2014/10/09/25(cve@mitre.org)

http://www.securityfocus.com/bid/70376(cve@mitre.org)

http://www.spinics.net/lists/linux-ext4/msg45683.html(cve@mitre.org)

http://www.spinics.net/lists/linux-ext4/msg45685.html(cve@mitre.org)

https://bugzilla.redhat.com/show_bug.cgi?id=1151353(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/96922(cve@mitre.org)

https://lkml.org/lkml/2014/10/8/545(cve@mitre.org)

https://lkml.org/lkml/2014/10/9/129(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html(af854a3a-2127-422b-91ae-364da2661108)

http://rhn.redhat.com/errata/RHSA-2015-0290.html(af854a3a-2127-422b-91ae-364da2661108)

http://rhn.redhat.com/errata/RHSA-2015-0694.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2014/10/09/25(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/70376(af854a3a-2127-422b-91ae-364da2661108)

http://www.spinics.net/lists/linux-ext4/msg45683.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.spinics.net/lists/linux-ext4/msg45685.html(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=1151353(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/96922(af854a3a-2127-422b-91ae-364da2661108)

https://lkml.org/lkml/2014/10/8/545(af854a3a-2127-422b-91ae-364da2661108)

https://lkml.org/lkml/2014/10/9/129(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.