vulnerability
Ubuntu: (CVE-2014-9914): linux vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:N/C:C/I:C/A:C) | Feb 7, 2017 | Nov 19, 2024 | Nov 27, 2024 |
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Feb 7, 2017
Added
Nov 19, 2024
Modified
Nov 27, 2024
Description
Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect expectations about locking during multithreaded access to internal data structures for IPv4 UDP sockets.
Solution(s)
ubuntu-upgrade-linuxubuntu-upgrade-linux-lts-trusty
References
- CVE-2014-9914
- https://attackerkb.com/topics/CVE-2014-9914
- URL-http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9709674e68646cee5a24e3000b3558d25412203a
- URL-http://source.android.com/security/bulletin/2017-02-01.html
- URL-http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2
- URL-https://github.com/torvalds/linux/commit/9709674e68646cee5a24e3000b3558d25412203a
- URL-https://www.cve.org/CVERecord?id=CVE-2014-9914
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.