CVE-2014-5471: Linux Kernel

Medium severity, CVSS 4.0. EPSS: 0.5% chance of exploitation in the next 30 days.

Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system crash or reboot) via a crafted iso9660 image with a CL entry referring to a directory entry that has a CL entry.

Affected products

• Linux Linux Kernel: up to and including 3.16.1; version 3.16.0 only

Published 2014-09-01. Last modified 2026-06-17.