CVE-2014-8172

Description

The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	linux	3.13.4-1	—
Debian 13	linux	3.13.4-1	—
Debian 12	linux	3.13.4-1	—

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 7	perf +17	3.10.0-229.el7	RHSA-2015:0290

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Red Hat MRG 2	kernel-rt +10	1:3.10.0-229.rt56.144.el6rt	RHSA-2015:0694

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 7	perf +11	3.10.0-229.el7	ELSA-2015-0290

Advisories 3

RHSA-2015:0290 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
RHSA-2015:0694 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 22, 2025
ELSA-2015-0290 Important: kernel security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Mar 11, 2015

The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking a…