Description
Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a write action and an F_SETFL fcntl operation for the O_DIRECT flag.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 3.16.7-ckt2-1 | — |
| Debian 13 | linux | 3.16.7-ckt2-1 | — |
| Debian 12 | linux | 3.16.7-ckt2-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | linux-lts-utopic | 3.16.0-26.35~14.04.1 | USN-2447-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | perf +17 | 3.10.0-229.el7 | RHSA-2015:0290 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 2 | kernel-rt +10 | 1:3.10.0-229.rt56.144.el6rt | RHSA-2015:0694 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 | kernel-docs +1 | 3.12.43-52.6.2 | SUSE-SU-2015:1071-1 |
| SLES 12 | kernel-ec2 +4 | 3.12.43-52.6.1 | SUSE-SU-2015:1071-1 |
| SLES 11 SP2 | kernel-ec2 +6 | 3.0.101-0.7.37.1 | SUSE-SU-2015:1478-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 | kernel-xen +3 | 3.12.43-52.6.1 | SUSE-SU-2015:1071-1 |
| SLE Live Patching 12 | kgraft-patch-SLE12_Update_5 | 1-2.3 | SUSE-SU-2015:1071-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | perf +11 | 3.10.0-229.el7 | ELSA-2015-0290 |
Advisories 6
- RHSA-2015:0290 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- USN-2447-1 linux-lts-utopic vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- SUSE-SU-2015:1478-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:1071-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- RHSA-2015:0694 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- ELSA-2015-0290 Important: kernel security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Mar 11, 2015
References
- [linux-kernel] 20141008 ext4: kernel BUG at fs/ext4/inode.c:2959! mailing-list
- 70376 vdb-entry
- [linux-ext4] 20141009 [PATCH] add aio/dio regression test race between write and fcntl mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=1151353
- [linux-ext4] 20141009 [PATCH] ext4: fix race between write and fcntl(F_SETFL) mailing-list
- RHSA-2015:0694 vendor-advisory
- RHSA-2015:0290 vendor-advisory
- SUSE-SU-2015:1478 vendor-advisory
- linux-kernel-cve20148086-dos(96922) vdb-entry
- [linux-kernel] 20141009 Re: ext4: kernel BUG at fs/ext4/inode.c:2959! mailing-list
- [oss-security] 20141009 CVE-2014-8086 - Linux kernel ext4 race condition mailing-list