CVE-2014-8172

2015-03-1600:00:00

ubuntu.com

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

The filesystem implementation in the Linux kernel before 3.13 performs
certain operations on lists of files with an inappropriate locking
approach, which allows local users to cause a denial of service (soft
lockup or system crash) via unspecified use of Asynchronous I/O (AIO)
operations.

Bugs

<https://launchpad.net/bugs/1430949>

Notes

Author	Note
jdstrand	android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support
henrix	it’s still not clear that the commit actually fixes the issue; see oss-security