A flaw was found in the way the xfs_da3_fixhashpath() function of the Linux kernel's XFS file system implementation ordered directory hashes under certain conditions. A local attacker could use this flaw to corrupt the file system by creating directories, potentially resulting in kernel panic. Upstream fix: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c88547a8119e3b581318ab65e9b72f27f23e641d Reproducer: http://oss.sgi.com/cgi-bin/gitweb.cgi?p=xfs/cmds/xfstests.git;a=blob;f=src/dirhash_collide.c;h=55cec872d5061ac2ca0f56d1f11e6bf349d5bb97;hb=947ee8bd4b59770534297572b14c695e9c6e001e References: http://seclists.org/oss-sec/2014/q4/28 http://marc.info/?l=linux-xfs&m=139590613002926&w=2
Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6 and 7.
This issue has been addressed in the following products: MRG for RHEL-6 v.2 Via RHSA-2014:1943 https://rhn.redhat.com/errata/RHSA-2014-1943.html