CVE-2014-6410: Linux Kernel

Medium severity, CVSS 4.7. EPSS: 0.5% chance of exploitation in the next 30 days.

The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted inode.

Affected products

• Linux Linux Kernel: up to and including 3.16.3; version 3.16.0 only; version 3.16.1 only; version 3.16.2 only

Published 2014-09-28. Last modified 2026-06-17.