The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numa_maps read operations during hugepage migration, related to fs/proc/task_mmu.c and mm/mempolicy.c.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 5, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 6, 2015 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 5, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-zfcpdump | Dec 9, 2016 | Jun 5, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-32-generic-lpaeUpgrade linux-image-3.13.0-32-genericUpgrade linux-image-3.13.0-32-lowlatencyUpgrade linux-image-3.13.0-32-powerpc-e500mcUpgrade linux-image-3.13.0-32-powerpc64-smpUpgrade linux-image-3.13.0-32-powerpc64-embUpgrade linux-image-3.13.0-32-powerpc-smpUpgrade linux-image-3.13.0-32-powerpc-e500 | Nov 8, 2024 | Jun 5, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub