cyfenced.com →

[ CVE-2014-0196 · Published 7 May 2014 ]

Linux Kernel Race Condition Vulnerability

Exploited · CISA KEV CVSS 5.5 EPSS 20%Fix available

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2023-05-12
  • EPSS: 20% chance of exploitation in the next 30 days (higher than 97% of CVEs)

[ Description ]Official description

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

CISA: Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 2 Jun 2023): The impacted product is end-of-life and should be disconnected if still in use.

[ References ]References