Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system crash or reboot) via a crafted iso9660 image with a CL entry referring to a directory entry that has a CL entry.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-tools-libsUpgrade kernel-firmwareUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade perfUpgrade python-perf | Dec 1, 2016 | Aug 31, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 1, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 1, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 26, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade kernel-obs-build | Dec 18, 2015 | Aug 31, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-69-powerpc64-smpUpgrade linux-image-3.13.0-36-powerpc-e500mcUpgrade linux-image-3.13.0-36-powerpc64-embUpgrade linux-image-3.13.0-36-powerpc-e500Upgrade linux-image-2.6.32-66-preemptUpgrade linux-image-2.6.32-66-ia64Upgrade linux-image-3.13.0-36-genericUpgrade linux-image-3.2.0-69-genericUpgrade linux-image-3.2.0-69-omapUpgrade linux-image-2.6.32-370-ec2Upgrade linux-image-2.6.32-66-sparc64-smpUpgrade linux-image-3.13.0-36-lowlatencyUpgrade linux-image-3.2.0-69-highbankUpgrade linux-image-3.2.0-69-virtualUpgrade linux-image-2.6.32-66-lpiaUpgrade linux-image-2.6.32-66-386Upgrade linux-image-2.6.32-66-virtualUpgrade linux-image-3.13.0-36-powerpc64-smpUpgrade linux-image-2.6.32-66-powerpcUpgrade linux-image-2.6.32-66-generic-paeUpgrade linux-image-3.2.0-1453-omap4Upgrade linux-image-3.13.0-36-generic-lpaeUpgrade linux-image-2.6.32-66-powerpc64-smpUpgrade linux-image-2.6.32-66-powerpc-smpUpgrade linux-image-3.13.0-36-powerpc-smpUpgrade linux-image-3.2.0-69-powerpc-smpUpgrade linux-image-2.6.32-66-versatileUpgrade linux-image-2.6.32-66-sparc64Upgrade linux-image-2.6.32-66-genericUpgrade linux-image-3.2.0-69-generic-paeUpgrade linux-image-2.6.32-66-server | Nov 8, 2024 | Sep 1, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub