The try_to_unmap_cluster function in mm/rmap.c in the Linux kernel before 3.14.3 does not properly consider which pages must be locked, which allows local users to cause a denial of service (system crash) by triggering a memory-usage pattern that requires removal of page-table mappings.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | - | 3.14.3 |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| debian / debian_linux | 7.0 | 7.0.x |