CVE-2014-0203

The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service (incorrect free operations and system crash) via an open system call.

• CWE-416

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=86acdca1b63e6890540fa19495cfc708beff3d8b
• http://linux.oracle.com/errata/ELSA-2014-0771.htmlThird Party Advisory
• http://linux.oracle.com/errata/ELSA-2014-3043.htmlThird Party Advisory
• http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33Broken Link
• http://secunia.com/advisories/59262Broken Link
• http://secunia.com/advisories/59309Broken Link
• http://secunia.com/advisories/59406Broken Link
• http://secunia.com/advisories/59560Broken Link
• http://www.securityfocus.com/bid/68125Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1094363Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/86acdca1b63e6890540fa19495cfc708beff3d8bPatch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=86acdca1b63e6890540fa19495cfc708beff3d8b
• http://linux.oracle.com/errata/ELSA-2014-0771.htmlThird Party Advisory
• http://linux.oracle.com/errata/ELSA-2014-3043.htmlThird Party Advisory
• http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33Broken Link
• http://secunia.com/advisories/59262Broken Link
• http://secunia.com/advisories/59309Broken Link
• http://secunia.com/advisories/59406Broken Link
• http://secunia.com/advisories/59560Broken Link
• http://www.securityfocus.com/bid/68125Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1094363Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/86acdca1b63e6890540fa19495cfc708beff3d8bPatch, Third Party Advisory

Published

Jun 23, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0197CFME: CSRF protection vulnerability via permissive check of …8.8
• CVE-2014-0198The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x throug…
• CVE-2014-0199The setup script in ovirt-engine-reports, as used in the Red…
• CVE-2014-0200The Red Hat Enterprise Virtualization Manager reports (rhevm…
• CVE-2014-0201ovirt-engine-reports, as used in the Red Hat Enterprise Virt…
• CVE-2014-0202The setup script in ovirt-engine-dwh, as used in the Red Hat…
• CVE-2014-0204OpenStack Identity (Keystone) before 2014.1.1 does not prope…
• CVE-2014-0205The futex_wait function in kernel/futex.c in the Linux kerne…
• CVE-2014-0206Array index error in the aio_read_events_ring function in fs…
• CVE-2014-0207The cdf_read_short_sector function in cdf.c in file before 5…6.5
• CVE-2014-0208Cross-site scripting (XSS) vulnerability in the search auto-…
• CVE-2014-0209Multiple integer overflows in the (1) FontFileAddEntry and (…