Linux Kernel 'fs/file_table.c' Local Denial of Service Vulnerability

Bugtraq ID:	72994
Class:	Design Error
CVE:	CVE-2014-8172
Remote:	No
Local:	Yes
Published:	Nov 09 2013 12:00AM
Updated:	May 15 2015 12:02AM
Credit:	Al Viro
Vulnerable:	Linux kernel
Not Vulnerable:

Linux Kernel 'fs/file_table.c' Local Denial of Service Vulnerability

The Linux kernel is prone to a local denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected system, denying service to legitimate users.

Linux Kernel 'fs/file_table.c' Local Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Linux Kernel 'fs/file_table.c' Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Linux Kernel 'fs/file_table.c' Local Denial of Service Vulnerability

References:

• CVE-2014-8172 kernel: soft lockup on aio (Red Hat)
  
• get rid of s_files and files_lock (Linux)
  
• Linux kernel Homepage (kernel.org)
  
• Security Bulletin: Multiple Kernel vulnerabilities affect PowerKVM (Multiple CVE (IBM)