Use After Free in Linux Kernel

CVE-2014-0100

Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly have unspecified other impact via a large series of fragmented ICMP Echo Request packets to a system with a heavy CPU load.

Vulnerability class: Race Condition

EPSS: 0.030 (85.9th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel
N/a — versions n/a

Weakness classification (CWE)

References

secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch, Mailing List, Third Party Advisory)
secalert@redhat.com (Patch, Third Party Advisory, x_refsource_MISC)
secalert@redhat.com (x_refsource_CONFIRM, Patch, Third Party Advisory, Issue Tracking)