VULNERABILITY INTELLIGENCE
CVE-2014-9420
CVSS score4.9 MEDIUM
EPSS probability0.45%
CISA KEVNot currently listed
Published2014-12-26
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C
Description
The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image.