PT-2014-4783 · Linux+4 · Linux Kernel+4

Published 2014-03-24 · Updated 2019-05-10 · CVE-2014-2568

Positive Technologies (AI Summary)

CVSS v2.0

2.9

Low

Base vector

AV:A/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13.6

Description The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the nfqnl zcopy function, which allows attackers to obtain sensitive information from kernel memory. This is possible due to the absence of a certain orphaning operation. The affected code was later moved to the skb zerocopy function.

Recommendations For Linux kernel versions prior to 3.13.6, update to version 3.13.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the nfqnl zcopy function until a patch is available.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2014-1355

ALT-PU-2014-1820

ALT-PU-2014-2064

CVE-2014-2568

OPENSUSE-SU-2016_0301-1

RHSA-2014:0786

RHSA-2014_0786

USN-2239-1

USN-2240-1

USN-2241-1

USN-2260-1

Affected Products

Alt Linux

Linux Kernel

Red Hat

Suse

Ubuntu

References · 501

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/fi01/CVE-2015-3636 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libpingpong_exploit · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/nardholio/cve-2016-0728 · Exploit
• 🔥 https://github.com/a7vinx/CVE-2015-3636 · Exploit
• 🔥 https://github.com/askk/libping_unhash_exploit_POC · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/bittorrent3389/cve-2016-0728 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit