CVE-2014-8171: The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of serv...

Security readout for executives and security teams

CVE-2014-8171 is a Linux kernel availability issue in the memory cgroup controller. A local user could trigger a deadlock by creating processes inside a memory-constrained cgroup, potentially hanging affected systems or workloads. The source bundle does not provide CVSS, exact affected versions, or evidence of active exploitation. Exposure is most likely on Linux systems using memory-constrained cgroups with local users or untrusted workloads. The provided data does not enumerate affected distributions, kernel versions, CPEs, or cloud/container-specific exposure. Treat this as an availability risk for Linux systems that allow local or multi-tenant workloads. It is not supported as remotely exploitable by the provided sources, but kernel deadlocks can still disrupt critical services. Mitigation focus: Check kernel vendor advisories, especially the listed Red Hat RHSAs, for fixed packages.; Prioritize kernel updates on systems running untrusted local workloads in memory-limited cgroups.; Restrict untrusted local access where memory cgroups are enabled until vendor status is confirmed..

Prepared

Jun 7, 2026, 20:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.