CVE-2014-0203: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service (incorrect free operations and system crash) via an open system call.

Affected products

• Linux Linux Kernel: before 2.6.33 (fixed in 2.6.33)
• Oracle Linux: version 5 only; version 6 only

Published 2014-06-23. Last modified 2026-06-17.