CVE-2014-9420

CVE-2014-9420 is a denial-of-service vulnerability affecting the Linux kernel (through version 3.18.1) in the ISOFS rock_continue function. A local attacker can exploit this by crafting a malicious iso9660 image with excessive Rock Ridge continuation entries, leading to an infinite loop and system crash or hang. This vulnerability has a CVSS score of 4.9, indicating low attack complexity and local access requirements, with the primary impact being system availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.