01 Record

CVE-2014-8559

The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of service (deadlock and

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of service (deadlock and

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.74% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 51.9% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2014-11-10 11:00Z11 YR AGO

Last updated

2024-08-06 13:18Z2 YR AGO

Reserved

2014-10-30

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-400Uncontrolled Resource ConsumptionClass

Data version

5.1

Document digest

9db412a2c934771069547566ffa87a3d66a6c365b1284c976f8edb972a7f9ab9

05 Affected products

VendorProductVersionsPlatforms

canonicalubuntu_linuxNot specified—

linuxlinux_kernelNot specified—

novellsuse_linux_enterprise_desktopNot specified—

novellsuse_linux_enterprise_serverNot specified—

opensuseevergreenNot specified—

opensuseopensuseNot specified—

oraclelinuxNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_mrgNot specified—

redhatrhel_extras_rtNot specified—

suselinux_enterprise_real_time_extensionNot specified—

suselinux_enterprise_software_development_kitNot specified—

suselinux_enterprise_workstation_extensionNot specified—

susesuse_linux_enterprise_serverNot specified—

06 References

lkml.org[linux-kernel] 20141026 Re: fs: lockup on rename_mutex in fs/dcache.c:1035https://lkml.org/lkml/2014/10/26/116mailing-listx_refsource_MLIST
www.ubuntu.comUSN-2515-1http://www.ubuntu.com/usn/USN-2515-1vendor-advisoryx_refsource_UBUNTU
lkml.org[linux-kernel] 20141026 Re: fs: lockup on rename_mutex in fs/dcache.c:1035https://lkml.org/lkml/2014/10/26/101mailing-listx_refsource_MLIST
www.debian.orgDSA-3170http://www.debian.org/security/2015/dsa-3170vendor-advisoryx_refsource_DEBIAN
lists.opensuse.orgSUSE-SU-2015:0736http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.htmlvendor-advisoryx_refsource_SUSE
www.ubuntu.comUSN-2492-1http://www.ubuntu.com/usn/USN-2492-1vendor-advisoryx_refsource_UBUNTU
rhn.redhat.comRHSA-2015:1978http://rhn.redhat.com/errata/RHSA-2015-1978.htmlvendor-advisoryx_refsource_REDHAT
www.openwall.com[oss-security] 20141030 CVE-2014-8559 - Linux kernel fs/dcache.c incorrect use of rename_lockhttp://www.openwall.com/lists/oss-security/2014/10/30/7mailing-listx_refsource_MLIST
secunia.com62801http://secunia.com/advisories/62801third-party-advisoryx_refsource_SECUNIA
rhn.redhat.comRHSA-2015:1976http://rhn.redhat.com/errata/RHSA-2015-1976.htmlvendor-advisoryx_refsource_REDHAT
lists.opensuse.orgSUSE-SU-2015:0178http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.htmlvendor-advisoryx_refsource_SUSE
lkml.org[linux-kernel] 20141026 Re: fs: lockup on rename_mutex in fs/dcache.c:1035https://lkml.org/lkml/2014/10/26/128mailing-listx_refsource_MLIST
www.securityfocus.com70854http://www.securityfocus.com/bid/70854vdb-entryx_refsource_BID
lkml.org[linux-kernel] 20141026 Re: fs: lockup on rename_mutex in fs/dcache.c:1035https://lkml.org/lkml/2014/10/25/179mailing-listx_refsource_MLIST
www.ubuntu.comUSN-2518-1http://www.ubuntu.com/usn/USN-2518-1vendor-advisoryx_refsource_UBUNTU
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlx_refsource_CONFIRM
lists.opensuse.orgSUSE-SU-2015:0481http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlvendor-advisoryx_refsource_SUSE
git.kernel.orghttps://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ca5358ef75fc69fee5322a38a340f5739d997c10x_refsource_CONFIRM
lists.opensuse.orgopenSUSE-SU-2015:0566http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlvendor-advisoryx_refsource_SUSE
lkml.org[linux-kernel] 20141026 Re: fs: lockup on rename_mutex in fs/dcache.c:1035https://lkml.org/lkml/2014/10/26/129mailing-listx_refsource_MLIST
www.ubuntu.comUSN-2493-1http://www.ubuntu.com/usn/USN-2493-1vendor-advisoryx_refsource_UBUNTU
www.securitytracker.com1034051http://www.securitytracker.com/id/1034051vdb-entryx_refsource_SECTRACK
git.kernel.orghttps://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=946e51f2bf37f1656916eb75bd0742ba33983c28x_refsource_CONFIRM
lkml.org[linux-kernel] 20141026 Re: fs: lockup on rename_mutex in fs/dcache.c:1035https://lkml.org/lkml/2014/10/25/180mailing-listx_refsource_MLIST
lists.opensuse.orgSUSE-SU-2015:0529http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.htmlvendor-advisoryx_refsource_SUSE
www.ubuntu.comUSN-2517-1http://www.ubuntu.com/usn/USN-2517-1vendor-advisoryx_refsource_UBUNTU
lkml.org[linux-kernel] 20141025 fs: lockup on rename_mutex in fs/dcache.c:1035https://lkml.org/lkml/2014/10/25/171mailing-listx_refsource_MLIST
lists.opensuse.orgopenSUSE-SU-2015:0714http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.htmlvendor-advisoryx_refsource_SUSE
www.ubuntu.comUSN-2516-1http://www.ubuntu.com/usn/USN-2516-1vendor-advisoryx_refsource_UBUNTU
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=1159313x_refsource_CONFIRM
support.f5.comhttps://support.f5.com/csp/article/K05211147x_refsource_CONFIRM

01 Record index

CVE-2014-8559

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2014-8559

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References