CVE-2014-7975: Medium severity linux kernel vulnerability
Last updated 24 July 2024
Other sources
Linux kernel file system implementation is vulnerable to a DoS flaw. It could occur by doing umount(2) call from within user name spaces.
An unprivileged user/process could use this flaw to render the system unusable by making file system inaccessible.
Upstream fix: ------------- -> http://thread.gmane.org/gmane.linux.kernel.stable/109312
Reference: ----------- -> http://seclists.org/oss-sec/2014/q4/229
— Red Hat
The doumount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAPSYSADMIN capability for doremountsb calls that change the root filesystem to read-only, which allows local users to cause a denial of service (loss of writability) by making certain unshare system calls, clearing the / MNTLOCKED flag, and making an MNTFORCE umount system call.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-7975?
CVE-2014-7975 is a denial-of-service vulnerability that can render a system unusable.
How do I fix CVE-2014-7975?
To fix CVE-2014-7975, you should update the Linux kernel to a version later than 3.17 or apply the specific patches provided by your distribution.
Which Linux versions are affected by CVE-2014-7975?
CVE-2014-7975 affects Linux kernel versions up to and including 3.17 and specific Ubuntu releases like 10.04, 12.04, 14.04, and 14.10.
Who can exploit CVE-2014-7975?
An unprivileged user or process can exploit CVE-2014-7975 to cause a denial-of-service condition by making the file system inaccessible.
What is a potential impact of CVE-2014-7975?
The potential impact of CVE-2014-7975 is system unavailability due to the inability to access the file system.