Description
The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/70261 ↗
- https://github.com/torvalds/linux/commit/c88547a8119e3b581318ab65e9b72f27f23e641d ↗
- http://marc.info/?l=linux-xfs&m=139590613002926&w=2 ↗
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.2 ↗
- http://www.openwall.com/lists/oss-security/2014/10/01/29 ↗
- http://rhn.redhat.com/errata/RHSA-2014-1943.html ↗
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c88547a8119e3b581318ab65e9b72f27f23e641d ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1148777 ↗