CVE-2014-6417: High severity linux kernel vulnerability
A flaw was reported in the Linux kernel where the libceph auth token could cause the kernel to incorrectly handle kmalloc failure.
Other sources
net/ceph/authx.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the possibility of kmalloc failure, which allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via a long unencrypted auth ticket.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6417?
CVE-2014-6417 has a medium severity rating due to its potential impact on the Linux kernel's ability to handle memory allocation failures.
How do I fix CVE-2014-6417?
To fix CVE-2014-6417, upgrade to the latest versions of the Linux kernel available, specifically versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
Which versions of the Linux kernel are affected by CVE-2014-6417?
CVE-2014-6417 affects Linux kernel versions prior to 3.16.3, including those between 3.4.105 and 3.16.3.
What component of the Linux kernel is primarily affected by CVE-2014-6417?
CVE-2014-6417 primarily affects the libceph authentication component in the Linux kernel.
Is CVE-2014-6417 a remote vulnerability?
CVE-2014-6417 is primarily a local vulnerability that could impact system stability due to improper handling of memory allocation.