Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-4171
HistoryJun 23, 2014 - 11:21 a.m.

Code injection

2014-06-2311:21:00
PRIOn knowledge base
www.prio-n.com
8

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.2%

mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to cause a denial of service (i_mutex hold) by using the mmap system call to access a hole, as demonstrated by interfering with intended shmem activity by blocking completion of (1) an MADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call.

CPENameOperatorVersion
ubuntu_linuxeq12.04
linux_kernelle3.15.1

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.2%