← Vulnerability Intelligence

CVE-2014-0196

Medium 5.5 Exploited in the wild (KEV)

Confirmed active exploitation — CISA KEV catalog

Name
Linux Kernel Race Condition Vulnerability
Added to catalog
Remediation due date (US federal)
Required action
The impacted product is end-of-life and should be disconnected if still in use.

Description

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

Metrics

CVSS 3.1
5.5 (MEDIUM) Score source: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS — exploit probability
20% (percentile: 97) as of 1 November 2026
CWE
CWE-362

Affected products

linux: linux kernel; debian: debian linux; redhat: enterprise linux; redhat: enterprise linux eus; redhat: enterprise linux server eus; suse: suse linux enterprise desktop; suse: suse linux enterprise high availability extension; suse: suse linux enterprise server; oracle: linux; canonical: ubuntu linux; f5: big-ip access policy manager; f5: big-ip advanced firewall manager; f5: big-ip analytics; f5: big-ip application acceleration manager; f5: big-ip application security manager

References