CVE-2014-3153
גבוהה 7.8 מנוצלת בשטח (KEV)
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- Linux Kernel Privilege Escalation Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply updates per vendor instructions.
תיאור (מקור, אנגלית)
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.
מדדים
- CVSS 3.1
-
7.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 37% (אחוזון 100) נכון ל-24/7/2026
מוצרים מושפעים
linux: linux kernel; redhat: enterprise linux server aus; opensuse: opensuse; suse: linux enterprise desktop; suse: linux enterprise high availability extension; suse: linux enterprise real time extension; suse: linux enterprise server; canonical: ubuntu linux; oracle: linux
קישורים
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13f… Mailing ListPatch
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a… Mailing ListPatch
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3e… Mailing ListPatch
- https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b59… Patch
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13f… Mailing ListPatch
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a… Mailing ListPatch
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3e… Mailing ListPatch
- https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b59… Patch
- http://www.debian.org/security/2014/dsa-2949 Exploit
- https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html Exploit