CVE-2014-8171

The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a memory-constrained cgroup.

Score

CVSS 3.0 5.5 Medium

Status

Modified - secalert@redhat.com

Published

2018-02-09

Last modified

2024-08-06

Weaknesses

CWE-399

Affected products

• Linux Kernel (Linux)
• Enterprise Linux (Redhat)
• Enterprise Mrg (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2015-0864.html
• http://rhn.redhat.com/errata/RHSA-2015-2152.html
• http://rhn.redhat.com/errata/RHSA-2015-2411.html
• http://rhn.redhat.com/errata/RHSA-2016-0068.html
• http://www.securityfocus.com/bid/74293
• https://bugzilla.redhat.com/show_bug.cgi?id=1198109