CVE-2014-9715

CVE-2014-9715 describes a denial-of-service vulnerability in the netfilter subsystem of the Linux kernel, affecting versions prior to 3.14.5. This flaw stems from an insufficiently large data type in nf_conntrack_extend.h, leading to a NULL pointer dereference and system crash (OOPS) when processing outbound network traffic that triggers extension loading, such as a PPTP tunnel in a NAT environment. With a CVSS score of 4.9, this vulnerability has a local attack vector and low attack complexity, resulting in a complete loss of availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.