CVE-2014-5045: Linux Kernel

Medium severity, CVSS 6.2. EPSS: 0.5% chance of exploitation in the next 30 days.

The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in conjunction with a symlink, which allows local users to cause a denial of service (memory consumption or use-after-free) or possibly have unspecified other impact via the umount program.

Affected products

• Linux Linux Kernel: before 3.15.8 (fixed in 3.15.8)
• Red Hat Enterprise Linux Eus: version 6.5 only
• Red Hat Enterprise Linux Server Aus: version 6.5 only
• Red Hat Enterprise Linux Server Tus: version 6.5 only

Published 2014-08-01. Last modified 2026-06-17.