CVE-2014-3153: Linux Kernel Privilege Escalation Vulnerability
High · CVSS 7.8 (CVSS 3.1)KEV known exploitedEPSS 37.2%, 99th percentilePublished Updated Assigner: Chrome
In CISA’s Known Exploited Vulnerabilities catalog: Linux Kernel Privilege Escalation Vulnerability.
Added , federal remediation due . Known ransomware use: Unknown.
Required action: Apply updates per vendor instructions.
Description
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Status incidents that name it
No tracked status incident names this CVE.
Affected vendors and products
Linux: Kernel
References
- CVE record on cve.org (opens in new tab)
- NVD entry (opens in new tab)
- git.kernel.org (opens in new tab)
- linux.oracle.com/errata/ELSA-2014-0771.html (opens in new tab)
- linux.oracle.com/errata/ELSA-2014-3037.html (opens in new tab)
- linux.oracle.com/errata/ELSA-2014-3038.html (opens in new tab)
- linux.oracle.com/errata/ELSA-2014-3039.html (opens in new tab)
- lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.html (opens in new tab)
- lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.html (opens in new tab)
- lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.html (opens in new tab)
- lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.html (opens in new tab)
- lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html (opens in new tab)
- lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html (opens in new tab)
- openwall.com/lists/oss-security/2014/06/05/24 (opens in new tab)
- openwall.com/lists/oss-security/2014/06/06/20 (opens in new tab)
- rhn.redhat.com/errata/RHSA-2014-0800.html (opens in new tab)
- bugzilla.redhat.com/show_bug.cgi (opens in new tab)
- secunia.com/advisories/58500 (opens in new tab)
- secunia.com/advisories/58990 (opens in new tab)
- secunia.com/advisories/59029 (opens in new tab)
- secunia.com/advisories/59092 (opens in new tab)
- secunia.com/advisories/59153 (opens in new tab)
- secunia.com/advisories/59262 (opens in new tab)
- secunia.com/advisories/59309 (opens in new tab)
- secunia.com/advisories/59386 (opens in new tab)
- secunia.com/advisories/59599 (opens in new tab)
- elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html (opens in new tab)
- github.com/elongl/CVE-2014-3153 (opens in new tab)
- github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8 (opens in new tab)
- git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/ (opens in new tab)
- git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/ (opens in new tab)
- git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/ (opens in new tab)
- www.openwall.com/lists/oss-security/2021/02/01/4 (opens in new tab)
- www.debian.org/security/2014/dsa-2949 (opens in new tab)
- www.exploit-db.com/exploits/35370 (opens in new tab)
- www.openwall.com/lists/oss-security/2014/06/05/22 (opens in new tab)
- www.openwall.com/lists/oss-security/2021/02/01/4 (opens in new tab)
- www.securityfocus.com/bid/67906 (opens in new tab)
- www.securitytracker.com/id/1030451 (opens in new tab)
- www.ubuntu.com/usn/USN-2237-1 (opens in new tab)
- www.ubuntu.com/usn/USN-2240-1 (opens in new tab)
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)