Vulnetix
Try Vulnetix Request Demo
CVE-2014-7283 PUBLISHED

The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.

EPSS 0.04% · 12.1th percentile

Risk Scores

EPSS Score
0.04%
12.1th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlinux0, 3.11.0-12.19, 3.12.0-1.3

Timeline

References

Open in Interactive Console →