CVE Feed

    Dashboard / CVE / CVE-2014-9728

    CVE-2014-9728

    The UDF filesystem implementation in the Linux kernel before 3.18.2 does not validate certain lengths, which allows local users to cause a denial of service (buffer over-read and system crash) via a crafted filesystem image, related to fs/udf/inode.c and fs/udf/symlink.c.

    Published:Dec 19, 2014
    Last Modified:Apr 12, 2025
    EPS:Aug 31, 2015
    EPSS Score:0.00041
    CVSS Score:4.9

    Affected Products

    Vendor
    Linux
    Product
    Linux Kernel

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-80925 — In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when …
    CVE-2026-80924 (CVSS 7.5) — In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for …
    CVE-2026-80923 — In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_regis…
    CVE-2026-80922 — In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random…
    CVE-2026-80921 (CVSS 8.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits …
    CVE-2026-80920 — In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when qu…
    CVE-2026-80919 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquir…
    CVE-2026-80918 — In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confus…
    CVE-2026-80917 — In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer deref…
    CVE-2026-80916 — In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race condit…

    References

    http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a1d47b262952a45aae62bd49cfaf33dd76c11a2c
    http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e159332b9af4b04d882dbcfe1bb0117f0a6d4b58
    http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e237ec37ec154564f8690c5bd1795339955eeef9
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html
    http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html
    http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html
    http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html
    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.2
    http://www.openwall.com/lists/oss-security/2015/06/02/7
    http://www.securityfocus.com/bid/74964
    https://bugzilla.redhat.com/show_bug.cgi?id=1228229
    https://github.com/torvalds/linux/commit/a1d47b262952a45aae62bd49cfaf33dd76c11a2c
    https://github.com/torvalds/linux/commit/e159332b9af4b04d882dbcfe1bb0117f0a6d4b58
    https://github.com/torvalds/linux/commit/e237ec37ec154564f8690c5bd1795339955eeef9
    http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a1d47b262952a45aae62bd49cfaf33dd76c11a2c
    http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e159332b9af4b04d882dbcfe1bb0117f0a6d4b58
    http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e237ec37ec154564f8690c5bd1795339955eeef9
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html
    http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html
    http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html
    http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html
    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.2
    http://www.openwall.com/lists/oss-security/2015/06/02/7
    http://www.securityfocus.com/bid/74964
    https://bugzilla.redhat.com/show_bug.cgi?id=1228229
    https://github.com/torvalds/linux/commit/a1d47b262952a45aae62bd49cfaf33dd76c11a2c
    https://github.com/torvalds/linux/commit/e159332b9af4b04d882dbcfe1bb0117f0a6d4b58
    https://github.com/torvalds/linux/commit/e237ec37ec154564f8690c5bd1795339955eeef9

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High