CveMateVulnerability intelligence

CVE-2014-8559: canonical ubuntu_linux Uncontrolled Resource Consumption

Modified

AliasesRHSA-2015:1976UBUNTU-CVE-2014-8559DEBIAN-CVE-2014-8559

Published 10-11-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-8559 is a medium (CVSS 5.5) Uncontrolled Resource Consumption vulnerability in canonical ubuntu_linux. EPSS estimates a 0.74% chance of exploitation in the next 30 days, higher than 54.5% of scored vulnerabilities. 3 public exploits are recorded.

Priority

Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

5.5/10

010

Medium · v3.1 (NVD)

EPSS score

0.74%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits3reference

Advisory lineage

Upstream 0 · Downstream 6 · Related 3

DSA-3170-1 RHSA-2015:1977 RHSA-2015:1978 SUSE-SU-2015:0529-1 USN-2516-1 USN-2517-1

Timeline

10-11-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of service (deadlock and system hang) via a crafted application.

CVSS metrics

4 scores · 3 sources · 2 versions

v3.15.5v2.04.9

EPSS trend

Probability

0.74%

Chance of exploitation in the next 30 days

Percentile

55%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.74% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

3 found

referenceUnverified
Exploit Reference (lkml.org)
Maturity: unknown
referenceUnverified
Exploit Reference (debian.org)
Maturity: unknown
referenceUnverified
Exploit Reference (lkml.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-400Uncontrolled Resource ConsumptionThe product does not properly control the allocation and maintenance of a limited resource.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat15 products

kernel-rt< 1:3.10.0-229.rt56.162.el6rt
kernel-rt-debug< 1:3.10.0-229.rt56.162.el6rt
kernel-rt-debug-debuginfo< 1:3.10.0-229.rt56.162.el6rt
kernel-rt-debug-devel< 1:3.10.0-229.rt56.162.el6rt
kernel-rt-debuginfo< 1:3.10.0-229.rt56.162.el6rt

Show all 15

Suse4 products

Novell2 products

suse_linux_enterprise_desktop12.0
suse_linux_enterprise_serverEOL12.0

Opensuse2 products

evergreen11.4
opensuseEOL13.1

Ubuntu2 products

linux< 3.13.0-46.75
linux-lts-utopic< 3.16.0-31.41~14.04.1

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04 | 14.10

Debian1 product

linux< 3.16.7-ckt4-1

Linux1 product

linux_kernel≤ 3.17.2

Oracle1 product

linuxEOL7

9 vendors · 29 products

References

46 links

lkml.org/lkml/2014/10/26/116Mailing ListX Refsource MLISTExploitThird Party Advisory
www.ubuntu.com/usn/USN-2515-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lkml.org/lkml/2014/10/26/101Mailing ListX Refsource MLISTThird Party Advisory
www.debian.org/security/2015/dsa-3170Vendor AdvisoryX Refsource DEBIANExploitPatchThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-2492-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
rhn.redhat.com/errata/RHSA-2015-1978.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.openwall.com/lists/oss-security/2014/10/30/7Mailing ListX Refsource MLISTThird Party Advisory
secunia.com/advisories/62801Third Party AdvisoryX Refsource SECUNIABroken Link
rhn.redhat.com/errata/RHSA-2015-1976.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory

Show all 46 references

lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lkml.org/lkml/2014/10/26/128Mailing ListX Refsource MLISTThird Party Advisory
www.securityfocus.com/bid/70854VDB EntryX Refsource BIDThird Party Advisory
lkml.org/lkml/2014/10/25/179Mailing ListX Refsource MLISTPatchThird Party Advisory
www.ubuntu.com/usn/USN-2518-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlX Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
git.kernel.org/cgit/…X Refsource CONFIRMMailing ListPatchVendor Advisory
lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lkml.org/lkml/2014/10/26/129Mailing ListX Refsource MLISTThird Party AdvisoryREPORT
www.ubuntu.com/usn/USN-2493-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.securitytracker.com/id/1034051VDB EntryX Refsource SECTRACKThird Party Advisory
git.kernel.org/cgit/…X Refsource CONFIRMMailing ListPatchVendor Advisory
lkml.org/lkml/2014/10/25/180Mailing ListX Refsource MLISTPatchThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-2517-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lkml.org/lkml/2014/10/25/171Mailing ListX Refsource MLISTExploitThird Party AdvisoryREPORT
lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-2516-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=1159313X Refsource CONFIRMIssue TrackingPatchThird Party AdvisoryREPORT
support.f5.com/csp/article/K05211147X Refsource CONFIRMThird Party Advisory
access.redhat.com/errata/RHSA-2015:1976Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1267373REPORT
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1976.jsonAdvisory
access.redhat.com/security/cve/CVE-2014-8559REPORT
www.cve.org/CVERecord?id=CVE-2014-8559AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2014-8559Advisory
ubuntu.com/security/CVE-2014-8559REPORT
ubuntu.com/security/notices/USN-2492-1Advisory
ubuntu.com/security/notices/USN-2493-1Advisory
ubuntu.com/security/notices/USN-2515-1Advisory
ubuntu.com/security/notices/USN-2516-1Advisory
ubuntu.com/security/notices/USN-2517-1Advisory
ubuntu.com/security/notices/USN-2518-1Advisory
security-tracker.debian.org/tracker/CVE-2014-8559Advisory