CVE-2014-1446

Published: Jan 18, 2014Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability for an SIOCYAMGCFG ioctl call.

Affected (8)

Products: Linux: Linux Kernel

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.12.7
Linux Linux Kernel	Version 3.12.1
Linux Linux Kernel	Version 3.12.2
Linux Linux Kernel	Version 3.12.3
Linux Linux Kernel	Version 3.12.4
Linux Linux Kernel	Version 3.12.5
Linux Linux Kernel	Version 3.12.6
Linux Linux Kernel	Version 3.12

Related CWEs

References (42)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8e3fbf870481eb53b2d3a322d1fc395ad8b367ed

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126858.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126874.html

Source: cve@mitre.org

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2014:038

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/01/15/3

Source: cve@mitre.org

http://www.securityfocus.com/bid/64954

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2113-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2117-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2128-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2129-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2133-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2134-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2135-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2136-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2138-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2139-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2141-1

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=1053620

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/90445

Source: cve@mitre.org

https://github.com/torvalds/linux/commit/8e3fbf870481eb53b2d3a322d1fc395ad8b367ed

Source: cve@mitre.org

Patch

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8e3fbf870481eb53b2d3a322d1fc395ad8b367ed

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126858.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126874.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2014:038

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2014/01/15/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/64954

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2113-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2117-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2128-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2129-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2133-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2134-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2135-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2136-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2138-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2139-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2141-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1053620

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/90445

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/8e3fbf870481eb53b2d3a322d1fc395ad8b367ed

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.