CVE-2017-14340: The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not verify tha...

Security readout for executives and security teams

This is a Linux kernel XFS denial-of-service issue. A local user could trigger a kernel NULL pointer dereference and OOPS when using an XFS directory flag on a filesystem without a realtime device. The likely business impact is service disruption, not data theft or remote compromise based on the supplied sources. Exposure is most relevant on systems running Linux kernels before 4.13.2 with XFS available, especially shared Linux servers where untrusted local users can interact with filesystems. The source bundle does not identify specific affected distro package versions beyond linked Red Hat and Debian advisories. Handle this through normal kernel patch management, with higher priority for shared or multi-tenant Linux systems. The evidence points to local service disruption rather than remote compromise, so it is important but not an emergency unless local users are untrusted. Mitigation focus: Apply vendor kernel updates from the relevant Linux distribution advisory.; Use kernels containing upstream fix commit b31ff3cdf540110da4572e3e29bd172087af65cc or Linux 4.13.2 or later.; Prioritize shared systems, multi-user servers, and hosts where untrusted local code can run..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.