Kernel: mm/shmem: denial of service

🗓️ 29 Sep 2014 19:41:06Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 3 Views

Kernel race in memory map, madvise, and fallocate on virtual memory files enables local denial of service.

Reporter	Title	Published	Views	Family All 354
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	6	x86_64	kernel-rt	0:3.10.33-rt32.51.el6rt	kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-debug	0:3.10.33-rt32.51.el6rt	kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-debug-debuginfo	0:3.10.33-rt32.51.el6rt	kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-debug-devel	0:3.10.33-rt32.51.el6rt	kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-debuginfo	0:3.10.33-rt32.51.el6rt	kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-debuginfo-common-x86_64	0:3.10.33-rt32.51.el6rt	kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-devel	0:3.10.33-rt32.51.el6rt	kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64.rpm
Red Hat Enterprise Linux	6	any	kernel-rt-doc	0:3.10.33-rt32.51.el6rt	kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch.rpm
Red Hat Enterprise Linux	6	any	kernel-rt-firmware	0:3.10.33-rt32.51.el6rt	kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch.rpm
Red Hat Enterprise Linux	6	x86_64	kernel-rt-trace	0:3.10.33-rt32.51.el6rt	kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2014-4171
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-4171
cve	www.cve.org/CVERecord

21 Nov 2025 17:50Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.7

EPSS0.0044

memory map madvise system call fallocate system call virtual memory denial of service local user kernel race condition memory file system system calls