CVE-2014-8559: Medium severity linux kernel vulnerability
Last updated 24 July 2024
Other sources
Linux kernel built with Virtual File System(VFS) support is vulnerable to a deadlock condition. It occurs due to incorrect usage of file system locks.
An unprivileged user/process could use this flaw to render the system unusable, thus resulting in DoS.
Upstream fix: ------------- -> https://git.kernel.org/linus/ca5358ef75fc69fee5322a38a340f5739d997c10 -> https://git.kernel.org/linus/946e51f2bf37f1656916eb75bd0742ba33983c28
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2014/10/30/7
— Red Hat
The dwalk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of renamelock, which allows local users to cause a denial of service (deadlock and system hang) via a crafted application.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8559?
CVE-2014-8559 is classified as a critical vulnerability because it can lead to a denial of service (DoS) condition.
How do I fix CVE-2014-8559?
To mitigate CVE-2014-8559, upgrade to a patched version of the Linux kernel, specifically versions 5.10.223-1, 5.10.226-1, 6.1.123-1, or later.
Which Linux distributions are affected by CVE-2014-8559?
CVE-2014-8559 affects various distributions including Linux Kernel versions up to 3.17.2, Ubuntu 12.04, 14.04, 14.10, and specific versions of SUSE and Oracle Linux.
What are the impacts of CVE-2014-8559?
If exploited, CVE-2014-8559 allows an unprivileged user to cause a system-wide deadlock, making the system unusable.
When was CVE-2014-8559 discovered?
CVE-2014-8559 was identified and published on October 25, 2014.