CVE-2014-3153
High 7.8 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Linux Kernel Privilege Escalation Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.
Metrics
- CVSS 3.1
-
7.8 (HIGH)
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 37% (percentile: 99) as of 1 November 2026
Affected products
linux: linux kernel; redhat: enterprise linux server aus; opensuse: opensuse; suse: linux enterprise desktop; suse: linux enterprise high availability extension; suse: linux enterprise real time extension; suse: linux enterprise server; canonical: ubuntu linux; oracle: linux
References
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fb… Mailing ListPatch
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a2… Mailing ListPatch
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3ea… Mailing ListPatch
- https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592… Patch
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fb… Mailing ListPatch
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a2… Mailing ListPatch
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3ea… Mailing ListPatch
- https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592… Patch
- http://www.debian.org/security/2014/dsa-2949 Exploit
- https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html Exploit