imPC@ndo IT

Tracker / CVE-2014-0038

CVE-2014-0038

Medium 6.9

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.

Affected products and versions

linux linux_kernel · 3.11 → 3.12.10
linux linux_kernel · 3.13 → 3.13.2
linux linux_kernel · 3.4 → 3.4.79
linux linux_kernel · 3.5 → 3.10.29
opensuse opensuse

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References