The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-whitelistsUpgrade kernel-debugUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debug-develUpgrade perfUpgrade kernel-docUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-firmware | Dec 1, 2016 | Dec 25, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 26, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 5, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Dec 26, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 15, 2014 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-ec2-extra | Dec 18, 2015 | Dec 25, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-2.6.32-72-generic-paeUpgrade linux-image-3.2.0-1459-omap4Upgrade linux-image-3.2.0-76-powerpc-smpUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.2.0-76-omapUpgrade linux-image-2.6.32-72-sparc64-smpUpgrade linux-image-2.6.32-72-lpiaUpgrade linux-image-2.6.32-72-versatileUpgrade linux-image-3.2.0-76-genericUpgrade linux-image-3.2.0-76-generic-paeUpgrade linux-image-2.6.32-72-serverUpgrade linux-image-2.6.32-72-386Upgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-3.2.0-76-powerpc64-smpUpgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-2.6.32-72-powerpcUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-2.6.32-72-virtualUpgrade linux-image-2.6.32-72-genericUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.2.0-76-virtualUpgrade linux-image-3.13.0-46-genericUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-2.6.32-72-powerpc64-smpUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.16.0-31-genericUpgrade linux-image-2.6.32-72-sparc64Upgrade linux-image-2.6.32-72-ia64Upgrade linux-image-2.6.32-72-preemptUpgrade linux-image-2.6.32-72-powerpc-smpUpgrade linux-image-2.6.32-375-ec2Upgrade linux-image-3.2.0-76-highbank | Nov 8, 2024 | Dec 26, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub