The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero length for the first segment of an iov.
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | 4.4 | 4.4 |
| Linux_kernel | Linux | 4.4 | 4.4 |
| Linux_kernel | Linux | 4.4 | 4.4 |
| Linux_kernel | Linux | 4.4 | 4.4 |
| Linux_kernel | Linux | * | * |