PT-2014-5810 · Linux+1 · Linux Kernel+1

Published 2014-09-09 · Updated 2025-09-29 · CVE-2014-4323

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x

Description The issue concerns the mdp lut hw update function in the MDP display driver, which does not validate certain start and length values within an ioctl call. This allows attackers to gain privileges via a crafted application.

Recommendations For Linux kernel version 3.x, update to a version that includes the fix for the mdp lut hw update function issue in the MDP display driver.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2014-2106

ALT-PU-2015-1794

CVE-2014-4323

Affected Products

Alt Linux

Linux Kernel

References · 6

• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• https://ubuntu.com/security/CVE-2014-4323 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-4323 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-4323 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-4323 · Security Note
• https://codeaurora.org/projects/security-advisories/improper-input-validation-mdp-driver-when-processing-color-maps · Note