CVE-2014-8172
The filesystem implementation in the Linux kernel before 3.13 performs certain operations on...
4.9 MediumFix available
The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.
Exploit likelihood
0.38%Down 0.7 points since Feb 4, 2022
What each source reports
NVD Score used
The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.
- Record
CVE-2014-8172- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-17
- Updated
- 2026-11-02
CVE List No score
The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.
- Record
CVE-2014-8172- Updated
- 2026-11-02
EUVDEUVD-2014-8013 No score
The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.
- Record
EUVD-2014-8013- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f8hg-rhq8-h2gr No score
The filesystem implementation in the Linux kernel before 3.13 performs certain operations on...
The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.
- Record
GHSA-f8hg-rhq8-h2gr- Updated
- 2026-11-02
OSVRHSA-2015:0290
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2015:0290- CVSS 3.0
- 6.2 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2015:0694
Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
- Record
RHSA-2015:0694- CVSS 3.0
- 6.2 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV No score
The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.
- Record
CVE-2014-8172- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-8172 No score
The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.
- Record
DEBIAN-CVE-2014-8172- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-8172 No score
The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.
- Record
UBUNTU-CVE-2014-8172- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 3.13.4-1 | 3.13.4-1 |
linuxDebian:13 |
before 3.13.4-1 | 3.13.4-1 |
linuxDebian:14 |
before 3.13.4-1 | 3.13.4-1 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perfRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
Show 86 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-perf-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernelRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debugRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-develRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-docRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-headersRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-toolsRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perfRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perfRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernelRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-develRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-docRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-headersRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-toolsRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perfRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perfRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernelRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-bootwrapperRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debugRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-develRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-docRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-headersRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-kdumpRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-kdump-develRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-toolsRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perfRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perfRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernelRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-develRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-docRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-headersRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-toolsRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perfRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-rtRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-debugRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-debuginfo-common-x86_64Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-docRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-firmwareRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-traceRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-8172 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published March 16, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in linux 3.13.4-1.
References
openwall.com/lists/oss-security/2015/03/09/3
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eee5cc2702929fd41cce28058dc6d6717f723f87
rhn.redhat.com/errata/RHSA-2015-0694.html
bugzilla.redhat.com/show_bug.cgi?id=1198503
github.com/torvalds/linux/commit/eee5cc2702929fd41cce28058dc6d6717f723f87
Show 91 moreShow less
nvd.nist.gov/vuln/detail/CVE-2014-8172
security-tracker.debian.org/tracker/CVE-2014-8172
access.redhat.com/errata/RHSA-2015:0290
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0290.json
cve.org/CVERecord?id=CVE-2014-3690
ubuntu.com/security/CVE-2014-8172