PT-2014-5708 · Linux+1 · Linux Kernel+1

Published 2014-06-18 · Updated 2018-12-18 · CVE-2014-4157

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.14.8

Description The issue allows local users to bypass intended PR SET SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem, due to the lack of TIF SECCOMP checks on the fast system-call path in the Linux kernel on the MIPS platform.

Recommendations For versions prior to 3.14.8, update to version 3.14.8 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2014-1795

ALT-PU-2014-2064

CVE-2014-4157

DLA-103-1

Affected Products

Alt Linux

Linux Kernel

References · 291

• 🔥 https://github.com/torvalds/linux/commit/137f7df8cead00688524c82360930845396b8a21 · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/recvmmsg_priv_esc.rb · Exploit
• 🔥 https://github.com/saelo/cve-2014-0038 · Exploit
• 🔥 https://github.com/timwr/CVE-2014-3153 · Exploit
• 🔥 https://github.com/android-rooting-tools/libfutex_exploit · Exploit
• 🔥 https://github.com/lieanu/CVE-2014-3153 · Exploit
• 🔥 https://github.com/elongl/CVE-2014-3153 · Exploit
• 🔥 https://github.com/zerodavinci/CVE-2014-3153-exploit · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=137f7df8cead00688524c82360930845396b8a21 · Exploit
• https://bdu.fstec.ru/vul/2015-05721 · Security Note
• https://bdu.fstec.ru/vul/2015-05743 · Security Note
• https://bdu.fstec.ru/vul/2015-05902 · Security Note
• https://bdu.fstec.ru/vul/2015-05751 · Security Note