The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry.
CVSS Details
- CVSS 3.1 Base Score: 5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-toolsUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-abi-whitelistsUpgrade kernel-firmwareUpgrade kernel-docUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libs-devel | Dec 1, 2016 | Aug 31, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 1, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 1, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 26, 2014 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-zfcpdump | Dec 18, 2015 | Aug 31, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-36-powerpc64-embUpgrade linux-image-2.6.32-370-ec2Upgrade linux-image-2.6.32-66-preemptUpgrade linux-image-3.2.0-69-powerpc64-smpUpgrade linux-image-3.13.0-36-lowlatencyUpgrade linux-image-3.13.0-36-powerpc-e500Upgrade linux-image-2.6.32-66-ia64Upgrade linux-image-3.2.0-69-highbankUpgrade linux-image-3.2.0-69-omapUpgrade linux-image-2.6.32-66-sparc64-smpUpgrade linux-image-3.13.0-36-powerpc-e500mcUpgrade linux-image-3.2.0-69-genericUpgrade linux-image-2.6.32-66-serverUpgrade linux-image-3.2.0-69-generic-paeUpgrade linux-image-2.6.32-66-virtualUpgrade linux-image-3.2.0-1453-omap4Upgrade linux-image-2.6.32-66-powerpc-smpUpgrade linux-image-3.2.0-69-powerpc-smpUpgrade linux-image-2.6.32-66-versatileUpgrade linux-image-3.13.0-36-genericUpgrade linux-image-2.6.32-66-powerpcUpgrade linux-image-3.13.0-36-powerpc64-smpUpgrade linux-image-3.13.0-36-generic-lpaeUpgrade linux-image-3.13.0-36-powerpc-smpUpgrade linux-image-2.6.32-66-386Upgrade linux-image-2.6.32-66-lpiaUpgrade linux-image-2.6.32-66-generic-paeUpgrade linux-image-2.6.32-66-sparc64Upgrade linux-image-2.6.32-66-genericUpgrade linux-image-2.6.32-66-powerpc64-smpUpgrade linux-image-3.2.0-69-virtual | Nov 8, 2024 | Sep 1, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub