CVE-2014-8086: Race Condition
Last updated 24 July 2024
Other sources
Linux kernel built with an Ext4 file system(CONFIGEXT4FS) support is vulnerable to a race condition flaw. It could occur while performing asynchronous & Direct I/O operations and fcntl(FSETFL) call concurrently.
An unprivileged user/process could use this flaw to crash the system kernel resulting in DoS.
Upstream fix: ------------- -> https://git.kernel.org/linus/a41537e69b4aa43f0fea02498c2595a81267383b
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2014/10/09/25
— Red Hat
Race condition in the ext4filewriteiter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a write action and an FSETFL fcntl operation for the ODIRECT flag.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8086?
CVE-2014-8086 is classified as a medium severity vulnerability due to its potential exploitation by unprivileged users.
How do I fix CVE-2014-8086?
To mitigate CVE-2014-8086, update your Linux kernel to a version that addresses this vulnerability, such as 5.10.223-1 or later.
What systems are affected by CVE-2014-8086?
CVE-2014-8086 affects Linux kernels prior to version 3.17 that are built with Ext4 file system support.
What type of vulnerability is CVE-2014-8086?
CVE-2014-8086 is a race condition flaw that may occur during concurrent asynchronous and Direct I/O operations.
Who can exploit CVE-2014-8086?
An unprivileged user or process can potentially exploit CVE-2014-8086, leading to unauthorized access or privilege escalation.