PT-2014-5620 · Linux+4 · Linux Kernel+4

Sasha Levin · Publicado 2014-06-05 · Atualizado 2021-07-15 · CVE-2014-3940

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:L/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.14.5

Description The issue allows local users to cause a denial of service, resulting in memory corruption or system crash, by accessing certain memory locations. This can be achieved by triggering a race condition via numa maps read operations during hugepage migration. The problem is related to the fs/proc/task mmu.c and mm/mempolicy.c files.

Recommendations For Linux kernel versions prior to 3.14.5, update to version 3.14.5 or later to resolve the issue. As a temporary workaround, consider restricting access to hugepage migration to minimize the risk of exploitation.

Exploit

Correção

DoS

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

ALT-PU-2014-1765

ALT-PU-2014-2064

CESA-2015_0290

CESA-2015_1272

CVE-2014-3940

RHSA-2014:0913

RHSA-2015:0290

RHSA-2015:1272

RHSA-2015_0290

RHSA-2015_1272

USN-2288-1

USN-2290-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Ubuntu

Referências · 369

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9 · Nota
• https://github.com/torvalds/linux/commit/f2e323ec96077642d397bb1c355def536d489d16 · Nota
• https://github.com/torvalds/linux/commit/3d4405226d27b3a215e4d03cfa51f536244e5de7 · Nota
• https://github.com/torvalds/linux/commit/05ab8f2647e4221cbdb3856dd7d32bd5407316b3 · Nota
• https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00 · Nota
• https://github.com/torvalds/linux/commit/c88547a8119e3b581318ab65e9b72f27f23e641d · Nota