{"id":"CVE-2014-7283","aliases":["BELL-CVE-2014-7283","DEBIAN-CVE-2014-7283","EUVD-2014-7154","GHSA-r29j-j5r6-jhjm","MGASA-2014-0451","MGASA-2014-0452","MGASA-2014-0455","RHSA-2014:1943","UBUNTU-CVE-2014-7283","USN-2226-1"],"status":"published","title":"The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux...","description":"The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.","severity":{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00546,"percentile":0.46019,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-399"],"published":"2014-05-27T06:49:10Z","modified":"2026-10-23T15:47:24Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["3.16.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["3.16.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["3.16.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-27.50"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.2-1"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.23-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-tmb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.23-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-vserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.23-0.vs2.3.6.13.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"util-vserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.216-0.pre3062.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.58-rt62.58.el6rt"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-27.50"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-27.50"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47"],"bundled":6}],"products":[{"vendor":"linux","product":"linux_kernel"},{"vendor":"redhat","product":"mrg_realtime"}],"references":[{"url":"http://www.securityfocus.com/bid/70261","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://github.com/torvalds/linux/commit/c88547a8119e3b581318ab65e9b72f27f23e641d","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","Third Party Advisory","advisory","evidence","fix"]},{"url":"http://marc.info/?l=linux-xfs\u0026m=139590613002926\u0026w=2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","Third Party Advisory","advisory","evidence","report"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.2","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/01/29","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1943.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c88547a8119e3b581318ab65e9b72f27f23e641d","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1148777","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","advisory","evidence","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7283","tags":["advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c88547a8119e3b581318ab65e9b72f27f23e641d"},{"url":"https://github.com/advisories/GHSA-r29j-j5r6-jhjm"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2014-7283","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-7283","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0451.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14003","tags":["report"]},{"url":"http://kernelnewbies.org/Linux_3.13","tags":["web"]},{"url":"http://kernelnewbies.org/Linux_3.14","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.1","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.2","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.3","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.4","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.5","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.6","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.7","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.9","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.10","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.11","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.12","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.13","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.14","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.15","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.16","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.17","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.18","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.19","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.20","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.21","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.22","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.23","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2014-0452.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14011","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13098","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2014-0455.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14306","tags":["report"]},{"url":"http://kernelnewbies.org/Linux_3.11","tags":["web"]},{"url":"http://kernelnewbies.org/Linux_3.12","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1943","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1134095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1158105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1161565","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1943.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-7283","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-7283","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-7825","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-7825","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7825","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-7826","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-7826","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7826","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-7283","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2226-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2239-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2394-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2260-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-0077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-1737","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-1738","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-2580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-2851","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-7283","description":"The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.","status":"published","published":"2014-10-13T10:00:00Z","modified":"2024-08-06T12:47:31.646Z","updated_at":"2026-11-02T14:33:46.955592Z"}],"euvd":[{"id":"EUVD-2014-7154","description":"The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.","status":"published","published":"2014-10-13T10:00:00Z","modified":"2024-08-06T12:47:31Z","updated_at":"2026-11-03T01:56:55.992719Z"}],"ghsa":[{"id":"GHSA-r29j-j5r6-jhjm","title":"The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux...","description":"The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.","status":"published","published":"2022-05-13T01:24:26Z","modified":"2025-04-12T12:40:36Z","updated_at":"2026-11-02T15:01:18.899916Z"}],"nvd":[{"id":"CVE-2014-7283","description":"The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.","status":"published","published":"2014-10-13T10:55:08.013Z","modified":"2026-06-17T00:14:41.413Z","cvss":[{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:02:56.266125Z"}],"osv":[{"id":"BELL-CVE-2014-7283","title":"CVE-2014-7283 does not affect BellSoft software","status":"withdrawn","published":"2014-10-13T10:55:00Z","modified":"2026-01-28T07:21:27.588243Z","cvss":[{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2014-7283","description":"The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.","status":"published","published":"2014-10-13T10:55:08Z","modified":"2026-04-16T06:22:52.426300118Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-7283","description":"The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.","status":"published","published":"2014-10-13T10:55:08.013Z","modified":"2026-10-23T15:47:24.195899875Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"MGASA-2014-0451","title":"Updated kernel-linus packages fix security vulnerabilities","description":"This kernel-linus update is based on upstream -longterm 3.14.23 and\nfixes the following security issues:\n\nThe kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux\nkernel through 3.16.1 miscalculates the number of pages during the\nhandling of a mapping failure, which allows guest OS users to (1)\ncause a denial of service (host OS memory corruption) or possibly\nhave unspecified other impact by triggering a large gfn value or\n(2) cause a denial of service (host OS memory consumption) by\ntriggering a small gfn value that leads to permanently pinned\npages (CVE-2014-3601).\n\nThe assoc_array_gc function in the associative-array implementation\nin lib/assoc_array.c in the Linux kernel before 3.16.3 does not\nproperly implement garbage collection, which allows local users to\ncause a denial of service (NULL pointer dereference and system\ncrash) or possibly have unspecified other impact via multiple\n\"keyctl newring\" operations followed by a \"keyctl timeout\"\noperation (CVE-2014-3631).\n\nThe xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the\nxfs implementation in the Linux kernel before 3.14.2 does not properly\ncompare btree hash values, which allows local users to cause a denial\nof service (filesystem corruption, and OOPS or panic) via operations\non directories that have hash collisions, as demonstrated by rmdir\noperations (CVE-2014-7283).\n\nThe net_get_random_once implementation in net/core/utils.c in the\nLinux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors\ndoes not perform the intended slow-path operation to initialize random\nseeds, which makes it easier for remote attackers to spoof or disrupt IP\ncommunication by leveraging the predictability of TCP sequence numbers,\nTCP and UDP port numbers, and IP ID values (CVE-2014-7284)\n\nThe pivot_root implementation in fs/namespace.c in the Linux kernel\nthrough 3.17 does not properly interact with certain locations of\na chroot directory, which allows local users to cause a denial of\nservice (mount-tree loop) via . (dot) values in both arguments to\nthe pivot_root system call (CVE-2014-7970).\n\nThe do_umount function in fs/namespace.c in the Linux kernel \nthrough 3.17 does not require the CAP_SYS_ADMIN capability for\ndo_remount_sb calls that change the root filesystem to read-only,\nwhich allows local users to cause a denial of service (loss of\nwritability) by making certain unshare system calls, clearing the\n/ MNT_LOCKED flag, and making an MNT_FORCE umount system call\n(CVE-2014-7975).\n\nFor other fixes included in this update, read the referenced\nchangelogs.\n","status":"published","published":"2014-11-15T18:31:46Z","modified":"2026-04-16T06:23:13.384146912Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2014-0452","title":"Updated kernel-tmb packages fix security vulnerabilities","description":"This kernel-tmb update is based on upstream -longterm 3.14.23 and\nfixes the following security issues:\n\nThe kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux\nkernel through 3.16.1 miscalculates the number of pages during the\nhandling of a mapping failure, which allows guest OS users to (1)\ncause a denial of service (host OS memory corruption) or possibly\nhave unspecified other impact by triggering a large gfn value or\n(2) cause a denial of service (host OS memory consumption) by\ntriggering a small gfn value that leads to permanently pinned\npages (CVE-2014-3601).\n\nThe assoc_array_gc function in the associative-array implementation\nin lib/assoc_array.c in the Linux kernel before 3.16.3 does not\nproperly implement garbage collection, which allows local users to\ncause a denial of service (NULL pointer dereference and system\ncrash) or possibly have unspecified other impact via multiple\n\"keyctl newring\" operations followed by a \"keyctl timeout\"\noperation (CVE-2014-3631).\n\nThe xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the\nxfs implementation in the Linux kernel before 3.14.2 does not properly\ncompare btree hash values, which allows local users to cause a denial\nof service (filesystem corruption, and OOPS or panic) via operations\non directories that have hash collisions, as demonstrated by rmdir\noperations (CVE-2014-7283).\n\nThe net_get_random_once implementation in net/core/utils.c in the\nLinux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors\ndoes not perform the intended slow-path operation to initialize random\nseeds, which makes it easier for remote attackers to spoof or disrupt IP\ncommunication by leveraging the predictability of TCP sequence numbers,\nTCP and UDP port numbers, and IP ID values (CVE-2014-7284)\n\nThe pivot_root implementation in fs/namespace.c in the Linux kernel\nthrough 3.17 does not properly interact with certain locations of\na chroot directory, which allows local users to cause a denial of\nservice (mount-tree loop) via . (dot) values in both arguments to\nthe pivot_root system call (CVE-2014-7970).\n\nThe do_umount function in fs/namespace.c in the Linux kernel \nthrough 3.17 does not require the CAP_SYS_ADMIN capability for\ndo_remount_sb calls that change the root filesystem to read-only,\nwhich allows local users to cause a denial of service (loss of\nwritability) by making certain unshare system calls, clearing the\n/ MNT_LOCKED flag, and making an MNT_FORCE umount system call\n(CVE-2014-7975).\n\nOther fixes:\nThe X86_SYSFB config option has been disabled as it prevents\nproper KMS setup on some systems (mga#13098)\n\nBFS cpu scheduler has been updated to 0.454.\n\nBFQ io scheduler has been added and set as default.\n\nFor other fixes included in this update, read the referenced\nchangelogs.\n","status":"published","published":"2014-11-15T18:31:46Z","modified":"2026-04-16T06:24:41.891772628Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2014-0455","title":"Updated kernel-vserver packages fix security vulnerabilities","description":"This kernel-vserver update provides an upgrade to the upstream 3.14\n-longterm branch, currently based on 3.14.23 and fixes the following\nsecurity issues:\n\nThe kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux\nkernel through 3.16.1 miscalculates the number of pages during the\nhandling of a mapping failure, which allows guest OS users to (1)\ncause a denial of service (host OS memory corruption) or possibly\nhave unspecified other impact by triggering a large gfn value or\n(2) cause a denial of service (host OS memory consumption) by\ntriggering a small gfn value that leads to permanently pinned\npages (CVE-2014-3601).\n\nThe assoc_array_gc function in the associative-array implementation\nin lib/assoc_array.c in the Linux kernel before 3.16.3 does not\nproperly implement garbage collection, which allows local users to\ncause a denial of service (NULL pointer dereference and system\ncrash) or possibly have unspecified other impact via multiple\n\"keyctl newring\" operations followed by a \"keyctl timeout\"\noperation (CVE-2014-3631).\n\nThe xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the\nxfs implementation in the Linux kernel before 3.14.2 does not properly\ncompare btree hash values, which allows local users to cause a denial\nof service (filesystem corruption, and OOPS or panic) via operations\non directories that have hash collisions, as demonstrated by rmdir\noperations (CVE-2014-7283).\n\nThe net_get_random_once implementation in net/core/utils.c in the\nLinux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors\ndoes not perform the intended slow-path operation to initialize random\nseeds, which makes it easier for remote attackers to spoof or disrupt IP\ncommunication by leveraging the predictability of TCP sequence numbers,\nTCP and UDP port numbers, and IP ID values (CVE-2014-7284)\n\nThe pivot_root implementation in fs/namespace.c in the Linux kernel\nthrough 3.17 does not properly interact with certain locations of\na chroot directory, which allows local users to cause a denial of\nservice (mount-tree loop) via . (dot) values in both arguments to\nthe pivot_root system call (CVE-2014-7970).\n\nThe do_umount function in fs/namespace.c in the Linux kernel \nthrough 3.17 does not require the CAP_SYS_ADMIN capability for\ndo_remount_sb calls that change the root filesystem to read-only,\nwhich allows local users to cause a denial of service (loss of\nwritability) by making certain unshare system calls, clearing the\n/ MNT_LOCKED flag, and making an MNT_FORCE umount system call\n(CVE-2014-7975).\n\nOther fixes:\nThe X86_SYSFB config option has been disabled as it prevents\nproper KMS setup on some systems (mga#13098)\n\nThe vserver patch has been updated to vs2.3.6.13\n\nThe util-vserver userspace tools has been updated to 0.30.216-pre3062\n\nFor other fixes included in this update, read the referenced\nchangelogs.\n","status":"published","published":"2014-11-15T18:31:46Z","modified":"2026-04-16T06:26:08.234213308Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"RHSA-2014:1943","title":"Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update","status":"published","published":"2024-09-13T09:20:01Z","modified":"2025-11-22T10:56:13Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"UBUNTU-CVE-2014-7283","description":"The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.","status":"published","published":"2014-10-13T00:00:00Z","modified":"2026-04-22T09:49:01.266015Z","updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"USN-2226-1","title":"linux vulnerabilities","description":"\nMatthew Daley reported an information leak in the floppy disk driver of the\nLinux kernel. An unprivileged local user could exploit this flaw to obtain\npotentially sensitive information from kernel memory. (CVE-2014-1738)\n\nMatthew Daley reported a flaw in the handling of ioctl commands by the\nfloppy disk driver in the Linux kernel. An unprivileged local user could\nexploit this flaw to gain administrative privileges if the floppy disk\nmodule is loaded. (CVE-2014-1737)\n\nA flaw was discovered in the handling of network packets when mergeable\nbuffers are disabled for virtual machines in the Linux kernel. Guest OS\nusers may exploit this flaw to cause a denial of service (host OS crash) or\npossibly gain privilege on the host OS. (CVE-2014-0077)\n\nTörök Edwin discovered a flaw with Xen netback driver when used with\nLinux configurations that do not allow sleeping in softirq context. A guest\nadministrator could exploit this flaw to cause a denial of service (system\ncrash) on the host. (CVE-2014-2580)\n\nA flaw was discovered in the Linux kernel's ping sockets. An unprivileged\nlocal user could exploit this flaw to cause a denial of service (system\ncrash) or possibly gain privileges via a crafted application.\n(CVE-2014-2851)\n\nHannes Frederic Sowa reported a hash collision ordering problem in the xfs\nfilesystem in the Linux kernel. A local user could exploit this flaw to\ncause filesystem corruption and a denial of service (oops or panic).\n(CVE-2014-7283)\n","status":"published","published":"2014-05-27T06:49:10Z","modified":"2026-04-22T08:53:13.893239Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}