CVE-2014-7145: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 3.7% chance of exploitation in the next 30 days.

The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals.

Affected products

• Canonical Ubuntu Linux: version 12.04 only
• Linux Linux Kernel: from 3.6, before 3.10.55 (fixed in 3.10.55); from 3.11, before 3.12.29 (fixed in 3.12.29); from 3.13, before 3.14.19 (fixed in 3.14.19); from 3.15, before 3.16.3 (fixed in 3.16.3)
• Red Hat Enterprise Linux Desktop: version 7.0 only
• Red Hat Enterprise Linux Hpc Node: version 7.0 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Workstation: version 7.0 only

Published 2014-09-28. Last modified 2026-06-17.