CVE-2014-0038
NoneCVSS
—
EPSS
35.5%
Published
Feb 6, 2014
CISA due date
—
The record
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | linux | 0 | 3.13.4-1 |
| Debian:11 | linux | 0 | 3.13.4-1 |
| Debian:12 | linux | 0 | 3.13.4-1 |
| Debian:13 | linux | 0 | 3.13.4-1 |
| Mageia:3 | fglrx | 0 | 13.251-1.mga3.nonfree |
| Mageia:3 | kernel | 0 | 3.10.28-1.mga3 |
| Mageia:3 | kernel-linus | 0 | 3.10.28-1.mga3 |
| Mageia:3 | kernel-rt | 0 | 3.10.28-0.rt25.1.mga3 |
| Mageia:3 | kernel-tmb | 0 | 3.10.28-1.mga3 |
| Mageia:3 | kernel-userspace-headers | 0 | 3.10.28-1.mga3 |
| Mageia:3 | kernel-vserver | 0 | 3.10.28-0.vs2.3.6.8.1.mga3 |
| Mageia:3 | kmod-broadcom-wl | 0 | 6.30.223.141-10.mga3.nonfree |
| Mageia:3 | kmod-fglrx | 0 | 13.251-3.mga3.nonfree |
| Mageia:3 | kmod-nvidia-current | 0 | 319.60-11.mga3.nonfree |
| Mageia:3 | kmod-nvidia173 | 0 | 173.14.38-27.mga3.nonfree |
| Mageia:3 | kmod-nvidia304 | 0 | 304.108-12.mga3.nonfree |
| Mageia:3 | kmod-vboxadditions | 0 | 4.2.16-7.mga3 |
| Mageia:3 | kmod-virtualbox | 0 | 4.2.16-7.mga3 |
| Mageia:3 | kmod-xtables-addons | 0 | 2.3-11.mga3 |
| Mageia:4 | kernel | 0 | 3.12.9-1.mga4 |
| Mageia:4 | kernel-linus | 0 | 3.12.9-1.mga4 |
| Mageia:4 | kernel-rt | 0 | 3.12.9-0.rt13.1.mga4 |
| Mageia:4 | kernel-tmb | 0 | 3.12.9-1.mga4 |
| Mageia:4 | kernel-userspace-headers | 0 | 3.12.9-1.mga4 |
| Mageia:4 | kernel-vserver | 0 | 3.10.28-0.vs2.3.6.8.1.mga4 |
| Mageia:4 | kmod-broadcom-wl | 0 | 6.30.223.141-25.mga4.nonfree |
| Mageia:4 | kmod-fglrx | 0 | 13.251-10.mga4.nonfree |
| Mageia:4 | kmod-nvidia-current | 0 | 325.15-7.mga4.nonfree |
| Mageia:4 | kmod-nvidia173 | 0 | 173.14.39-11.mga4.nonfree |
| Mageia:4 | kmod-nvidia304 | 0 | 304.119-3.mga4.nonfree |
| Mageia:4 | kmod-vboxadditions | 0 | 4.3.6-9.mga4 |
| Mageia:4 | kmod-virtualbox | 0 | 4.3.6-9.mga4 |
| Mageia:4 | kmod-xtables-addons | 0 | 2.3-41.mga4 |
| SUSE:Linux Enterprise Module for Public Cloud 12 | kernel-ec2 | 0 | 3.12.74-60.64.66.1 |
| SUSE:Linux Enterprise Module for Public Cloud 12 | kernel-ec2 | 0 | 3.12.61-52.106.1 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | kernel-default | 0 | 3.12.74-60.64.66.1 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | kernel-source | 0 | 3.12.74-60.64.66.1 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | kernel-syms | 0 | 3.12.74-60.64.66.1 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | kernel-xen | 0 | 3.12.74-60.64.66.1 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | kgraft-patch-SLE12-SP1_Update_23 | 0 | 1-2.1 |
| SUSE:Linux Enterprise Server 12-LTSS | kernel-default | 0 | 3.12.61-52.106.1 |
| SUSE:Linux Enterprise Server 12-LTSS | kernel-source | 0 | 3.12.61-52.106.1 |
| SUSE:Linux Enterprise Server 12-LTSS | kernel-syms | 0 | 3.12.61-52.106.1 |
| SUSE:Linux Enterprise Server 12-LTSS | kernel-xen | 0 | 3.12.61-52.106.1 |
| SUSE:Linux Enterprise Server 12-LTSS | kgraft-patch-SLE12_Update_29 | 0 | 1-5.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | kernel-default | 0 | 3.12.74-60.64.66.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | kernel-source | 0 | 3.12.74-60.64.66.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | kernel-syms | 0 | 3.12.74-60.64.66.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | kernel-xen | 0 | 3.12.74-60.64.66.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | kgraft-patch-SLE12-SP1_Update_23 | 0 | 1-2.1 |
| SUSE:OpenStack Cloud 6 | kernel-default | 0 | 3.12.74-60.64.66.1 |
| SUSE:OpenStack Cloud 6 | kernel-source | 0 | 3.12.74-60.64.66.1 |
| SUSE:OpenStack Cloud 6 | kernel-syms | 0 | 3.12.74-60.64.66.1 |
| SUSE:OpenStack Cloud 6 | kernel-xen | 0 | 3.12.74-60.64.66.1 |
| SUSE:OpenStack Cloud 6 | kgraft-patch-SLE12-SP1_Update_23 | 0 | 1-2.1 |
| openSUSE:Tumbleweed | kernel-source | 0 | 4.8.13-1.1 |
Related vulnerabilities
- CVE-2023-52340 The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size… Also affects linux
- CVE-2024-39292 In the Linux kernel, the following vulnerability has been resolved: um: Add winch to… Also affects linux
- CVE-2024-38780 In the Linux kernel, the following vulnerability has been resolved: dma-buf/sw-sync… Also affects linux
- CVE-2024-36288 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop… Also affects linux
- CVE-2024-38633 In the Linux kernel, the following vulnerability has been resolved: serial: max3100… Also affects linux
- CVE-2024-38634 In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Lock… Also affects linux
- CVE-2024-38637 In the Linux kernel, the following vulnerability has been resolved: greybus: lights… Also affects linux
- CVE-2024-38659 In the Linux kernel, the following vulnerability has been resolved: enic: Validate length… Also affects linux