PT-2015-4026 · Linux+4 · Linux Kernel+4

Sasha Levin · Published 2014-01-23 · Updated 2023-12-22 · CVE-2014-8173

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13

Description The issue arises from the pmd none or trans huge or clear bad function in include/asm-generic/pgtable.h, which does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry on NUMA systems. This allows local users to cause a denial of service, resulting in a NULL pointer dereference and system crash, or possibly have unspecified other impact via a crafted MADV WILLNEED madvise system call that leverages the absence of a page-table lock.

Recommendations For Linux kernel versions prior to 3.13, update to version 3.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the MADV WILLNEED madvise system call to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

ALT-PU-2014-1079

ALT-PU-2014-1422

CESA-2015_0290

CVE-2014-8173

OPENSUSE-SU-2015_0714-1

RHSA-2015:0290

RHSA-2015:0694

RHSA-2015_0290

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

References · 19

• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• https://linux.oracle.com/errata/ELSA-2015-3013.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-8173 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-8173 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-8173 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-8173 · Security Note
• https://linux.oracle.com/errata/ELSA-2015-0290.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-8173 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-8173 · Security Note
• http://rhn.redhat.com/errata/RHSA-2015-0290.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0694.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-8173 · Vendor Advisory
• https://github.com/torvalds/linux/commit/ee53664bda169f519ce3c6a22d378f0b946c8178 · Note
• https://rhn.redhat.com/errata/RHSA-2015-0290.html · Note