CVE-2014-7145

Published: 28 September 2014

The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals.

From the Ubuntu Security Team

Raphael Geissert reported a NULL pointer dereference in the Linux kernel's CIFS client. A remote CIFS server could cause a denial of service (system crash) or possibly have other unspecified impact by deleting IPC$ share during resolution of DFS referrals.

Notes

android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.04 preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support

Status

References

• https://ubuntu.com/security/notices/USN-2394-1
• https://ubuntu.com/security/notices/USN-2395-1
• https://www.cve.org/CVERecord?id=CVE-2014-7145
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1373050