CVE-2014-0203 in Linux Kernel
Summary
The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service (incorrect free operations and system crash) via an open system call.
Reservation
12/03/2013
Disclosure
06/23/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 43526 | Linux Kernel proc_ns_follow_link input validation | 20 | Unproven | Official fix | CVE-2014-0203 |