The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-abi-whitelistsUpgrade kernel-debugUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools-libs-devel | Dec 1, 2016 | Dec 25, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 26, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 5, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Dec 26, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 15, 2014 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-obs-build | Dec 18, 2015 | Dec 25, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-76-virtualUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-2.6.32-72-genericUpgrade linux-image-2.6.32-72-virtualUpgrade linux-image-2.6.32-72-powerpcUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-2.6.32-72-powerpc64-smpUpgrade linux-image-2.6.32-72-preemptUpgrade linux-image-2.6.32-72-powerpc-smpUpgrade linux-image-3.2.0-76-highbankUpgrade linux-image-3.13.0-46-genericUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-2.6.32-375-ec2Upgrade linux-image-2.6.32-72-ia64Upgrade linux-image-3.16.0-31-genericUpgrade linux-image-2.6.32-72-sparc64Upgrade linux-image-2.6.32-72-386Upgrade linux-image-3.2.0-76-generic-paeUpgrade linux-image-2.6.32-72-generic-paeUpgrade linux-image-3.2.0-76-genericUpgrade linux-image-3.2.0-76-omapUpgrade linux-image-3.2.0-1459-omap4Upgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-2.6.32-72-sparc64-smpUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-2.6.32-72-lpiaUpgrade linux-image-2.6.32-72-versatileUpgrade linux-image-3.2.0-76-powerpc-smpUpgrade linux-image-2.6.32-72-serverUpgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-3.2.0-76-powerpc64-smp | Nov 8, 2024 | Dec 26, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub