CVE-2014-3153

Published: Jun 7, 2014Modified: Apr 21, 2026CISA KEV

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

Affected (18)

Products: Linux: Linux Kernel · Redhat: Enterprise Linux Server Aus · Opensuse: Opensuse · +3 more

Show all products

Linux: Linux Kernel · Redhat: Enterprise Linux Server Aus · Opensuse: Opensuse · Suse: Linux Enterprise Desktop, Linux Enterprise High Availability Extension, Linux Enterprise Real Time Extension, Linux Enterprise Server · Canonical: Ubuntu Linux · Oracle: Linux

1 product

1 product

Enterprise Linux Server Aus

1 product

4 products

Linux Enterprise Desktop

Linux Enterprise High Availability Extension

Linux Enterprise Real Time Extension

Linux Enterprise Server

1 product

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.2.60
Linux Linux Kernel	From 3.11 to 3.12.22
Linux Linux Kernel	From 3.13 to 3.14.6
Linux Linux Kernel	From 3.3 to 3.4.92
Linux Linux Kernel	From 3.5 to 3.10.42

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Server Aus	Version 6.2

Configuration C

8 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.4
Suse Linux Enterprise Desktop	Version 11 sp3
Suse Linux Enterprise High Availability Extension	Version 11 sp3
Suse Linux Enterprise Real Time Extension	Version 11 sp3
Suse Linux Enterprise Server	Version 11
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp3

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 5
Oracle Linux	Version 6

References (79)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e9c243a5a6de0be8e584c604d353412584b592f8

Source: chrome-cve-admin@google.com

Broken Link

http://linux.oracle.com/errata/ELSA-2014-0771.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://linux.oracle.com/errata/ELSA-2014-3037.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://linux.oracle.com/errata/ELSA-2014-3038.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://linux.oracle.com/errata/ELSA-2014-3039.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://openwall.com/lists/oss-security/2014/06/05/24

Source: chrome-cve-admin@google.com

Mailing List

http://openwall.com/lists/oss-security/2014/06/06/20

Source: chrome-cve-admin@google.com

Mailing List

http://rhn.redhat.com/errata/RHSA-2014-0800.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://secunia.com/advisories/58500

Source: chrome-cve-admin@google.com

Broken Link

http://secunia.com/advisories/58990

Source: chrome-cve-admin@google.com

Broken Link

http://secunia.com/advisories/59029

Source: chrome-cve-admin@google.com

Broken Link

http://secunia.com/advisories/59092

Source: chrome-cve-admin@google.com

Broken Link

http://secunia.com/advisories/59153

Source: chrome-cve-admin@google.com

Broken Link

http://secunia.com/advisories/59262

Source: chrome-cve-admin@google.com

Broken Link

http://secunia.com/advisories/59309

Source: chrome-cve-admin@google.com

Broken Link

http://secunia.com/advisories/59386

Source: chrome-cve-admin@google.com

Broken Link

http://secunia.com/advisories/59599

Source: chrome-cve-admin@google.com

Broken Link

http://www.debian.org/security/2014/dsa-2949

Source: chrome-cve-admin@google.com

Exploit

http://www.exploit-db.com/exploits/35370

Source: chrome-cve-admin@google.com

Third Party AdvisoryVDB Entry

http://www.openwall.com/lists/oss-security/2014/06/05/22

Source: chrome-cve-admin@google.com

Mailing List

http://www.openwall.com/lists/oss-security/2021/02/01/4

Source: chrome-cve-admin@google.com

Mailing List

http://www.securityfocus.com/bid/67906

Source: chrome-cve-admin@google.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1030451

Source: chrome-cve-admin@google.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2237-1

Source: chrome-cve-admin@google.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2240-1

Source: chrome-cve-admin@google.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1103626

Source: chrome-cve-admin@google.com

Issue TrackingThird Party Advisory

https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html

Source: chrome-cve-admin@google.com

Exploit

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e

Source: chrome-cve-admin@google.com

Mailing ListPatch

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a217887a7b658e2650c3feff22756ab80c7339

Source: chrome-cve-admin@google.com

Mailing ListPatch

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270

Source: chrome-cve-admin@google.com

Mailing ListPatch

https://github.com/elongl/CVE-2014-3153

Source: chrome-cve-admin@google.com

Third Party Advisory

https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8

Source: chrome-cve-admin@google.com

Patch

https://www.openwall.com/lists/oss-security/2021/02/01/4

Source: chrome-cve-admin@google.com

Mailing List

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e9c243a5a6de0be8e584c604d353412584b592f8

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://linux.oracle.com/errata/ELSA-2014-0771.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://linux.oracle.com/errata/ELSA-2014-3037.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://linux.oracle.com/errata/ELSA-2014-3038.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://linux.oracle.com/errata/ELSA-2014-3039.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://openwall.com/lists/oss-security/2014/06/05/24

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://openwall.com/lists/oss-security/2014/06/06/20

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://rhn.redhat.com/errata/RHSA-2014-0800.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/58500

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/58990

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/59029

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/59092

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/59153

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/59262

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/59309

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/59386

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/59599

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.debian.org/security/2014/dsa-2949

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.exploit-db.com/exploits/35370

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.openwall.com/lists/oss-security/2014/06/05/22

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2021/02/01/4

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.securityfocus.com/bid/67906

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1030451

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2237-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.ubuntu.com/usn/USN-2240-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1103626

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a217887a7b658e2650c3feff22756ab80c7339

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://github.com/elongl/CVE-2014-3153

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://www.openwall.com/lists/oss-security/2021/02/01/4

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-3153

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.