CVE-2014-9420: Linux Kernel

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image.

Affected products

• Linux Linux Kernel: up to and including 3.18.1

Published 2014-12-26. Last modified 2026-06-17.