PT-2014-5810 · Linux+1 · Linux Kernel+1

Publicado 2014-09-09 · Atualizado 2025-09-29 · CVE-2014-4323

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x

Description The issue concerns the mdp lut hw update function in the MDP display driver, which does not validate certain start and length values within an ioctl call. This allows attackers to gain privileges via a crafted application.

Recommendations For Linux kernel version 3.x, update to a version that includes the fix for the mdp lut hw update function issue in the MDP display driver.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2014-2106

ALT-PU-2015-1794

CVE-2014-4323

Produtos afetados

Alt Linux

Linux Kernel

Referências · 6

• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• https://codeaurora.org/projects/security-advisories/improper-input-validation-mdp-driver-when-processing-color-maps · Nota
• https://ubuntu.com/security/CVE-2014-4323 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-4323 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-4323 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2014-4323 · Nota de Segurança