PT-2014-8407
CVE-2014-8086
·
Published
2014-10-13
·
Updated
2020-08-14
Description by
CVSS 3.1
4.7
MediumMetricsAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 3.18
Description
A race condition exists in the ext4 file write iter function, allowing local users to cause a denial of service by making a file unavailable. This can be achieved through a combination of a write action and an F SETFL fcntl operation for the O DIRECT flag.
Recommendations
For Linux kernel versions prior to 3.18, consider upgrading to version 3.18 or later to resolve the issue. As a temporary workaround, consider restricting the use of the O DIRECT flag to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾