rewindex

RewindexCVEs

CVE-2014-0196: Linux Kernel Race Condition Vulnerability

Medium · CVSS 5.5 (CVSS 3.1)KEV known exploitedEPSS 20.3%, 97th percentilePublished Updated Assigner: redhat

In CISA’s Known Exploited Vulnerabilities catalog: Linux Kernel Race Condition Vulnerability.

Added , federal remediation due . Known ransomware use: Unknown.

Required action: The impacted product is end-of-life and should be disconnected if still in use.

Description

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Status incidents that name it

No tracked status incident names this CVE.

Affected vendors and products

Linux: Kernel

References

All CVEsMarkdownJSON