CVE-2014-1737

Published: May 11, 2014Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.

Affected (16)

Products: Linux: Linux Kernel · Oracle: Linux · Debian: Debian Linux · +2 more

Show all products

Linux: Linux Kernel · Oracle: Linux · Debian: Debian Linux · Suse: Linux Enterprise Desktop, Linux Enterprise High Availability Extension, Linux Enterprise Real Time Extension, Linux Enterprise Server · Redhat: Enterprise Linux Eus

1 product

1 product

1 product

4 products

Linux Enterprise Desktop

Linux Enterprise High Availability Extension

Linux Enterprise Real Time Extension

Linux Enterprise Server

1 product

Enterprise Linux Eus

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.2.59
Linux Linux Kernel	From 3.11 to 3.12.20
Linux Linux Kernel	From 3.13 to 3.14.4
Linux Linux Kernel	From 3.3 to 3.4.90
Linux Linux Kernel	From 3.5 to 3.10.40

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 5
Oracle Linux	Version 6

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 6.0
Debian Debian Linux	Version 7.0

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 11 sp3
Suse Linux Enterprise High Availability Extension	Version 11 sp3
Suse Linux Enterprise Real Time Extension	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp3

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Eus	Version 5.6
Redhat Enterprise Linux Eus	Version 6.3

Related CWEs

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (36)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ef87dbe7614341c2e7bfe8d32fcb7028cc97442c

Source: chrome-cve-admin@google.com

http://linux.oracle.com/errata/ELSA-2014-0771.html

Source: chrome-cve-admin@google.com

http://linux.oracle.com/errata/ELSA-2014-3043.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html

Source: chrome-cve-admin@google.com

http://rhn.redhat.com/errata/RHSA-2014-0800.html

Source: chrome-cve-admin@google.com

http://rhn.redhat.com/errata/RHSA-2014-0801.html

Source: chrome-cve-admin@google.com

http://secunia.com/advisories/59262

Source: chrome-cve-admin@google.com

http://secunia.com/advisories/59309

Source: chrome-cve-admin@google.com

http://secunia.com/advisories/59406

Source: chrome-cve-admin@google.com

http://secunia.com/advisories/59599

Source: chrome-cve-admin@google.com

http://www.debian.org/security/2014/dsa-2926

Source: chrome-cve-admin@google.com

http://www.debian.org/security/2014/dsa-2928

Source: chrome-cve-admin@google.com

http://www.openwall.com/lists/oss-security/2014/05/09/2

Source: chrome-cve-admin@google.com

http://www.securityfocus.com/bid/67300

Source: chrome-cve-admin@google.com

http://www.securitytracker.com/id/1030474

Source: chrome-cve-admin@google.com

https://bugzilla.redhat.com/show_bug.cgi?id=1094299

Source: chrome-cve-admin@google.com

https://github.com/torvalds/linux/commit/ef87dbe7614341c2e7bfe8d32fcb7028cc97442c

Source: chrome-cve-admin@google.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ef87dbe7614341c2e7bfe8d32fcb7028cc97442c

Source: af854a3a-2127-422b-91ae-364da2661108

http://linux.oracle.com/errata/ELSA-2014-0771.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://linux.oracle.com/errata/ELSA-2014-3043.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0800.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0801.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59262

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59309

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59406

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/59599

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-2926

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-2928

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2014/05/09/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/67300

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030474

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1094299

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/ef87dbe7614341c2e7bfe8d32fcb7028cc97442c

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.