CVE-2017-14340

The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime device, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via vectors related to setting an RHINHERIT flag on a directory.

• CWE-476

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b31ff3cdf540110da4572e3e29bd172087af65ccIssue Tracking, Patch, Third Party Advisory
• http://seclists.org/oss-sec/2017/q3/436Mailing List, Mitigation, Patch, Third Party Advisory
• http://www.debian.org/security/2017/dsa-3981
• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.2Release Notes, Vendor Advisory
• http://www.securityfocus.com/bid/100851Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:2918
• https://bugzilla.redhat.com/show_bug.cgi?id=1491344Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/b31ff3cdf540110da4572e3e29bd172087af65ccIssue Tracking, Patch, Third Party Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b31ff3cdf540110da4572e3e29bd172087af65ccIssue Tracking, Patch, Third Party Advisory
• http://seclists.org/oss-sec/2017/q3/436Mailing List, Mitigation, Patch, Third Party Advisory
• http://www.debian.org/security/2017/dsa-3981
• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.2Release Notes, Vendor Advisory
• http://www.securityfocus.com/bid/100851Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:2918
• https://bugzilla.redhat.com/show_bug.cgi?id=1491344Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/b31ff3cdf540110da4572e3e29bd172087af65ccIssue Tracking, Patch, Third Party Advisory

Published

Sep 15, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14332Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attack…
• CVE-2017-14333The process_version_sections function in readelf.c in GNU Bi…
• CVE-2017-14335On Beijing Hanbang Hanbanggaoke devices, because user-contro…
• CVE-2017-14337When MISP before 2.4.80 is configured with X.509 certificate…
• CVE-2017-14339The DNS packet parser in YADIFA before 2.2.6 does not check …
• CVE-2017-1434IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Conne…
• CVE-2017-14341ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWP…6.5
• CVE-2017-14342ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in…
• CVE-2017-14343ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadX…
• CVE-2017-14344This vulnerability allows local attackers to escalate privil…
• CVE-2017-14345SQL Injection exists in tianchoy/blog through 2017-09-12 via…
• CVE-2017-14346upload.php in tianchoy/blog through 2017-09-12 allows unrest…