CVE-2014-7283

2014-10-1300:00:00

ubuntu.com

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

9.0%

JSON

The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs
implementation in the Linux kernel before 3.14.2 does not properly compare
btree hash values, which allows local users to cause a denial of service
(filesystem corruption, and OOPS or panic) via operations on directories
that have hash collisions, as demonstrated by rmdir operations.

Bugs

<https://launchpad.net/bugs/1377337>

Notes

Author	Note
jdstrand	android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support per Debian, introduced in 3.10 reproducer: http://oss.sgi.com/cgi-bin/gitweb.cgi?p=xfs/cmds/xfstests.git;a=commitdiff;h=947ee8bd4b59770534297572b14c695e9c6e001e per apw, this was fixed in passing in 3.13.0-39.66~precise1, part of https://ubuntu.com/security/notices/USN-2394-1, but not documented in the changelog or the USN.

Author

Note

jdstrand

android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support per Debian, introduced in 3.10 reproducer: http://oss.sgi.com/cgi-bin/gitweb.cgi?p=xfs/cmds/xfstests.git;a=commitdiff;h=947ee8bd4b59770534297572b14c695e9c6e001e per apw, this was fixed in passing in 3.13.0-39.66~precise1, part of https://ubuntu.com/security/notices/USN-2394-1, but not documented in the changelog or the USN.

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlinux< 3.13.0-27.50UNKNOWN
ubuntu12.04noarchlinux-lts-saucy< 3.11.0-23.40~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-27.50~precise1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	linux	< 3.13.0-27.50	UNKNOWN
ubuntu	12.04	noarch	linux-lts-saucy	< 3.11.0-23.40~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-trusty	< 3.13.0-27.50~precise1	UNKNOWN