CVE-2014-7283
Fixed in a distro release EPSS <1%
The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.
Products: linux_kernel, redhat mrg_realtime
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 3.16.2-1 |
| Debian 13 | linux | 3.16.2-1 |
| Debian 14 | linux | 3.16.2-1 |
| Red Hat enterprise mrg 2 server el6 | kernel-rt | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debug | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debug-debuginfo | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debug-devel | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debuginfo | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-debuginfo-common-x86_64 | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-devel | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-doc | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-firmware | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-trace | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-trace-debuginfo | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-trace-devel | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-vanilla | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-vanilla-debuginfo | 0:3.10.58-rt62.58.el6rt |
| Red Hat enterprise mrg 2 server el6 | kernel-rt-vanilla-devel | 0:3.10.58-rt62.58.el6rt |
| Ubuntu 14.04 LTS | linux | 3.13.0-27.50 |