Detections
Analytics
CVE-2014-7283
medium
Description
The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.
References
https://github.com/torvalds/linux/commit/c88547a8119e3b581318ab65e9b72f27f23e641d
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-7154
https://bugzilla.redhat.com/show_bug.cgi?id=1148777
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.2