NULL pointer dereference in Linux kernel - CVE-2014-7841

Vulnerability identifier: #VU41051

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2014-7841

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can trigger denial of service conditions via a malformed INIT chunk.

Linux kernel
SUSE Linux Enterprise Server
SUSE Linux Enterprise Debuginfo
kernel-ec2-debuginfo
kernel-default-extra
kernel-xen-extra
kernel-trace-extra
kernel-ppc64-extra
kernel-pae-extra
kernel-default-debuginfo
kernel-default-debugsource
kernel-trace-debuginfo
kernel-trace-debugsource
kernel-default-devel-debuginfo
kernel-trace-devel-debuginfo
kernel-pae-devel
kernel-ec2-debugsource
kernel-xen-debuginfo
kernel-xen-debugsource
kernel-xen-devel-debuginfo
kernel-bigmem-debuginfo
kernel-bigmem-debugsource
kernel-ppc64-debuginfo
kernel-ppc64-debugsource
kernel-pae-debuginfo
kernel-pae-debugsource
kernel-pae-devel-debuginfo
kernel-xen-base
kernel-default-base
kernel-default-devel
kernel-source
kernel-syms
kernel-trace
kernel-trace-base
kernel-trace-devel
kernel-ec2
kernel-ec2-base
kernel-ec2-devel
kernel-xen
kernel-default
kernel-xen-devel
kernel-bigmem
kernel-bigmem-base
kernel-bigmem-devel
kernel-ppc64
kernel-ppc64-base
kernel-ppc64-devel
kernel-default-man
kernel-pae
kernel-pae-base

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

kernel-ec2-debuginfo - update to 3.0.101-108.132.1
kernel-default-extra - update to 3.0.101-108.132.1
kernel-xen-extra - update to 3.0.101-108.132.1
kernel-trace-extra - update to 3.0.101-108.132.1
kernel-ppc64-extra - update to 3.0.101-108.132.1
kernel-pae-extra - update to 3.0.101-108.132.1
kernel-default-debuginfo - update to 3.0.101-108.132.1
kernel-default-debugsource - update to 3.0.101-108.132.1
kernel-trace-debuginfo - update to 3.0.101-108.132.1
kernel-trace-debugsource - update to 3.0.101-108.132.1
kernel-default-devel-debuginfo - update to 3.0.101-108.132.1
kernel-trace-devel-debuginfo - update to 3.0.101-108.132.1
kernel-pae-devel - update to 3.0.101-108.132.1
kernel-ec2-debugsource - update to 3.0.101-108.132.1
kernel-xen-debuginfo - update to 3.0.101-108.132.1
kernel-xen-debugsource - update to 3.0.101-108.132.1
kernel-xen-devel-debuginfo - update to 3.0.101-108.132.1
kernel-bigmem-debuginfo - update to 3.0.101-108.132.1
kernel-bigmem-debugsource - update to 3.0.101-108.132.1
kernel-ppc64-debuginfo - update to 3.0.101-108.132.1
kernel-ppc64-debugsource - update to 3.0.101-108.132.1
kernel-pae-debuginfo - update to 3.0.101-108.132.1
kernel-pae-debugsource - update to 3.0.101-108.132.1
kernel-pae-devel-debuginfo - update to 3.0.101-108.132.1
kernel-xen-base - update to 3.0.101-108.132.1
kernel-default-base - update to 3.0.101-108.132.1
kernel-default-devel - update to 3.0.101-108.132.1
kernel-source - update to 3.0.101-108.132.1
kernel-syms - update to 3.0.101-108.132.1
kernel-trace - update to 3.0.101-108.132.1
kernel-trace-base - update to 3.0.101-108.132.1
kernel-trace-devel - update to 3.0.101-108.132.1
kernel-ec2 - update to 3.0.101-108.132.1
kernel-ec2-base - update to 3.0.101-108.132.1
kernel-ec2-devel - update to 3.0.101-108.132.1
kernel-xen - update to 3.0.101-108.132.1
kernel-default - update to 3.0.101-108.132.1
kernel-xen-devel - update to 3.0.101-108.132.1
kernel-bigmem - update to 3.0.101-108.132.1
kernel-bigmem-base - update to 3.0.101-108.132.1
kernel-bigmem-devel - update to 3.0.101-108.132.1
kernel-ppc64 - update to 3.0.101-108.132.1
kernel-ppc64-base - update to 3.0.101-108.132.1
kernel-ppc64-devel - update to 3.0.101-108.132.1
kernel-default-man - update to 3.0.101-108.132.1
kernel-pae - update to 3.0.101-108.132.1
kernel-pae-base - update to 3.0.101-108.132.1

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e40607cbe270a9e8360907cb1e62ddf0736e4864
• http://linux.oracle.com/errata/ELSA-2015-3004.html
• http://linux.oracle.com/errata/ELSA-2015-3005.html
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html
• http://rhn.redhat.com/errata/RHSA-2015-0087.html
• http://rhn.redhat.com/errata/RHSA-2015-0102.html
• http://rhn.redhat.com/errata/RHSA-2015-0284.html
• http://rhn.redhat.com/errata/RHSA-2015-0285.html
• http://rhn.redhat.com/errata/RHSA-2015-0695.html
• http://secunia.com/advisories/62305
• http://secunia.com/advisories/62597
• http://secunia.com/advisories/62735
• http://www.debian.org/security/2014/dsa-3093
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4
• http://www.openwall.com/lists/oss-security/2014/11/13/6
• http://www.securityfocus.com/bid/71081
• https://bugzilla.redhat.com/show_bug.cgi?id=1163087
• https://github.com/torvalds/linux/commit/e40607cbe270a9e8360907cb1e62ddf0736e4864
• https://support.f5.com/kb/en-us/solutions/public/16000/000/sol16016.html

• NULL pointer dereference in Linux kernel
• SUSE update for the Linux Kernel