CVE-2014-8172

published 2015-03-16

CVE-2014-8172: The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which…

Priority P4 15 medium 4.9 CVSS 2.0

AV L AC L Au N C N I N A C

The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 3.13.4-1 (bookworm)	linux 3.13.4-1 (bookworm)
linux	linux_kernel	<= 3.12.17	—
linux	linux_kernel	>= 0 < 3.13.4-1	3.13.4-1
linux	linux_kernel	>= 0 < 3.13.4-1	3.13.4-1
linux	linux_kernel	>= 0 < 3.13.4-1	3.13.4-1
linux	linux_kernel	>= 0 < 3.13.4-1	3.13.4-1

CVSS provenance

nvd v2.0 4.9 MEDIUM AV:L/AC:L/Au:N/C:N/I:N/A:C

osv 4.9 MEDIUM

vendor_debian 4.9 MEDIUM

vendor_redhat 4.9 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-17