http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f54e18f1b831c92f6512d2eedb224cd63d607d3d

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html

http://rhn.redhat.com/errata/RHSA-2015-1081.html

http://rhn.redhat.com/errata/RHSA-2015-1137.html

http://rhn.redhat.com/errata/RHSA-2015-1138.html

http://secunia.com/advisories/62801

http://www.mandriva.com/security/advisories?name=MDVSA-2015:058

http://www.openwall.com/lists/oss-security/2014/12/25/4

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://www.ubuntu.com/usn/USN-2490-1

http://www.ubuntu.com/usn/USN-2491-1

http://www.ubuntu.com/usn/USN-2492-1

http://www.ubuntu.com/usn/USN-2493-1

http://www.ubuntu.com/usn/USN-2515-1

http://www.ubuntu.com/usn/USN-2516-1

http://www.ubuntu.com/usn/USN-2517-1

http://www.ubuntu.com/usn/USN-2518-1

https://bugzilla.redhat.com/show_bug.cgi?id=1175235

https://github.com/torvalds/linux/commit/f54e18f1b831c92f6512d2eedb224cd63d607d3d

https://source.android.com/security/bulletin/2017-01-01.html

It was found that the Linux kernel's ISO file system implementation did not correctly limit the traversal of Rock Ridge extension Continuation Entries (CE). An attacker with physical access to the system could use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service.

The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image.

Red Hat, Inc. (AV:L/AC:M/Au:N/C:N/I:N/A:C)

https://access.redhat.com/errata/RHSA-2015:1081 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:1137 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:1138 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:1139 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2014-9420 [No Types Assigned]

The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image.

It was found that the Linux kernel's ISO file system implementation did not correctly limit the traversal of Rock Ridge extension Continuation Entries (CE). An attacker with physical access to the system could use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service.

Red Hat, Inc. (AV:L/AC:M/Au:N/C:N/I:N/A:C)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f54e18f1b831c92f6512d2eedb224cd63d607d3d [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:1081 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:1137 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:1138 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:1139 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2014-9420 [No Types Assigned]

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f54e18f1b831c92f6512d2eedb224cd63d607d3d [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2015-1081.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2015-1137.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2015-1138.html [No Types Assigned]

https://source.android.com/security/bulletin/2017-01-01.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html [No Types Assigned]

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html

http://www.mandriva.com/security/advisories?name=MDVSA-2015:058

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html

http://www.ubuntu.com/usn/USN-2491-1

http://www.ubuntu.com/usn/USN-2490-1

http://www.ubuntu.com/usn/USN-2492-1

http://www.ubuntu.com/usn/USN-2493-1

http://www.ubuntu.com/usn/USN-2515-1

http://www.ubuntu.com/usn/USN-2516-1

http://www.ubuntu.com/usn/USN-2517-1

http://www.ubuntu.com/usn/USN-2518-1

http://secunia.com/advisories/62801

(AV:L/AC:L/Au:N/C:N/I:N/A:C)

CWE-399

Configuration 1
     OR
          *cpe:2.3:o:linux:linux_kernel:3.18.1:*:*:*:*:*:*:* (and previous)

https://bugzilla.redhat.com/show_bug.cgi?id=1175235 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=1175235 Advisory