IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.8Yüksek KEV

CVE-2014-3153Linux Kernel Privilege Escalation Vulnerability

linux linux kernel; redhat enterprise linux server aus; opensuse opensuse; suse linux enterprise desktop Yayım: (12 yıl önce)

Aktif olarak istismar ediliyor — Linux Kernel Privilege Escalation Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 25.05.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 15.06.2022.

Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2014-3153

Açıklama

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
canonical ubuntu linux 12.04
linux linux kernel < 3.2.60
opensuse opensuse 11.4
oracle linux 5
redhat enterprise linux server aus 6.2
suse linux enterprise desktop 11
suse linux enterprise high availability extension 11
suse linux enterprise real time extension 11
suse linux enterprise server 11

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (18)
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* < 3.2.60
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 3.3 < 3.4.92
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 3.5 < 3.10.42
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 3.11 < 3.12.22
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 3.13 < 3.14.6
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp3:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp3:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
  • cpe:2.3:o:oracle:linux:5:-:*:*:*:*:*:*
  • cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*

Aynı üründe son açıklar — Linux kernel

Puansız
CVE-2026-99284

net: skbuff: propagate shared-frag marker in skb_zerocopy()

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker in skb_zerocopy() skb_zerocopy() moves frag descriptors from @from into @to and takes a reference on each frag, but it does not copy skb_shinfo(fro…

Puansız
CVE-2026-99279

ksmbd: reclaim ended sessions on logoff and expiration

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reclaim ended sessions on logoff and expiration LOGOFF and previous-session replacement leave sessions Expired with a zero credential expiry. Ended sessions can retain their memory a…

Puansız
CVE-2026-99282

net/sched: sch_teql: fix use-after-free on lower qdisc drop

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: fix use-after-free on lower qdisc drop The issue: teql_master_xmit() tests the slave's ndo_start_xmit() return value against NETDEV_TX_OK alone. A slave that consumes t…

Puansız
CVE-2026-99281

tun: Require CAP_NET_ADMIN to attach to an ownerless device

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: tun: Require CAP_NET_ADMIN to attach to an ownerless device Twenty years ago I made creating a tuntap device require CAP_NET_ADMIN in commit ca6bb5d7ab22 ("[NET]: Require CAP_NET_ADMIN to c…