CVE-2014-3631

High

Published: 28/09/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The assoc_array_gc function in the associative-array implementation in the Linux kernel before version 3.16.3 does not properly implement garbage collection, which may lead to system crashes or other unspecified impacts.

Risk Assessment

Local users can exploit this vulnerability to cause a denial of service through NULL pointer dereference, leading to system crashes.

Recommendation

It is recommended to update the Linux kernel to version 3.16.3 or later to mitigate this vulnerability.

Other vulnerabilities in Linux kernel (versions before 3.16.3)

CVE-2014-7145High
The SMB2_tcon function in the Linux kernel before version 3.16.3 allows remote CIFS servers to cause a denial of service through NULL pointer dereference, leading to client system crashes. It may also lead to unspecified other impacts by deleting the IPC$ share during DFS referral resolution.

Original NVD description (English source)

The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.16.3 does not properly implement garbage collection, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via multiple "keyctl newring" operations followed by a "keyctl timeout" operation.