CVE-2014-2672: Race Condition
Last updated 24 July 2024
Other sources
Race condition in the athtxaggrsleep function in drivers/net/wireless/ath/ath9k/xmit.c in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via a large amount of network traffic that triggers certain list deletions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 3.13.7
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2672?
CVE-2014-2672 is classified as a denial of service vulnerability that may lead to system crashes due to a race condition.
How do I fix CVE-2014-2672?
To fix CVE-2014-2672, upgrade to a Linux kernel version greater than 3.13.7.
Which versions of the Linux kernel are affected by CVE-2014-2672?
CVE-2014-2672 affects Linux kernel versions prior to 3.13.7, including versions from 3.2 to 3.12.
Can CVE-2014-2672 be exploited remotely?
Yes, CVE-2014-2672 can be exploited remotely by sending a large amount of network traffic to the affected system.
What specific function is responsible for the vulnerability in CVE-2014-2672?
The vulnerability in CVE-2014-2672 is caused by a race condition in the ath_tx_aggr_sleep function.