CVEs-PoC/2014/CVE-2014-5472.md

CVE-2014-5472

Description

The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry.

POC

Reference

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4
• http://www.ubuntu.com/usn/USN-2358-1

Github

No PoCs found on GitHub currently.