Linux Kernel 'shmem.c' CVE-2014-4171 Local Denial of Service Vulnerability

Bugtraq ID:	68157
Class:	Design Error
CVE:	CVE-2014-4171
Remote:	No
Local:	Yes
Published:	Jun 17 2014 12:00AM
Updated:	Apr 13 2015 09:15PM
Credit:	Sasha Levin
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Thomas Lange Fully Automated Installation 3.1.2 Red Hat MRG Realtime for RHEL 6 Server 2 Linux kernel 3.1.8 Linux kernel 3.0.5 Linux kernel 3.0.4 Linux kernel 3.0.2 Linux kernel 3.0.1 Linux kernel 3.0.18 Linux kernel 3.0-rc4-git1 Linux kernel 3.0-rc1 Linux kernel 3.0
Not Vulnerable:

Linux Kernel 'shmem.c' CVE-2014-4171 Local Denial of Service Vulnerability

The Linux kernel is prone to a local denial-of-service vulnerability.

Local attackers can exploit this issue to cause a denial-of-service condition.

Linux Kernel 'shmem.c' CVE-2014-4171 Local Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Linux Kernel 'shmem.c' CVE-2014-4171 Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Linux Kernel 'shmem.c' CVE-2014-4171 Local Denial of Service Vulnerability

References:

• Bug 1111180 - (CVE-2014-4171) CVE-2014-4171 Kernel: mm/shmem: denial of service (Red Hat Bugzilla)
  
• [PATCH 1/3] Revert "shmem: fix faulting into a hole while it's punched (Hugh Dickins)
  
• CVE-2014-4171 - Linux kernel mm/shmem.c denial of service (MITRE CVE Numbering Authority)
  
• Linux kernel Homepage (kernel.org)
  
• shmem-fix-faulting-into-a-hole-while-its-punched.patch added to -mm tree (Hugh Dickins)
  
• shmem: fix faulting into a hole while it's punched (Hugh Dickins)
  
• openSUSE Security Update: kernel: security and bugfix update (SUSE)
  
• Security Bulletin: PowerKVM Kernel Vulnerabilities - Multiple CVEs (IBM)