← Back

CVE-2014-9914

nvd nist
Published: Feb 7, 2017Modified: May 13, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect expectations about locking during multithreaded access to internal data structures for IPv4 UDP sockets.

Affected (5)

1 product
Linux Kernel
1 product
Android
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Linux
From 3.11 to 3.12.23
From 3.13 to 3.14.9
From 3.15 to 3.15.2
From 3.7.8 to 3.10.45
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Up to 7.1.1

References (12)

Source: security@android.com
Third Party Advisory
Source: security@android.com
Release NotesVendor Advisory
Source: security@android.com
Third Party AdvisoryVDB Entry
Source: security@android.com
Third Party AdvisoryVDB Entry
Source: security@android.com
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory

Timeline

No history available yet.