CVE-2014-5472: Linux Kernel

Medium severity, CVSS 4.0. EPSS: 0.5% chance of exploitation in the next 30 days.

The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry.

Affected products

• Linux Linux Kernel: up to and including 3.16.1; version 3.16.0 only

Published 2014-09-01. Last modified 2026-06-17.