CVE-2014-3153

Vulnerability overview

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

Severity and scoring

CVSS score

7.8 · HIGH

CVSS version

3.1

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

NVD-CWE-noinfo

CVSS measures technical severity; it does not establish whether this vulnerability is being exploited in your environment.

Known exploitation and remediation

Listed in CISA’s Known Exploited Vulnerabilities catalog.

Affected product

Linux · Kernel

Added to catalog

2022-05-25

Required action

Apply updates per vendor instructions.

CISA remediation due date

2022-06-15

CISA deadlines apply to the organizations covered by its directives. Confirm your own remediation requirements.

Verify affected versions and patch availability in the vendor advisory before making changes.

Affected products and versions

• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

  Before (exclusive): 3.2.60

• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

  From (inclusive): 3.3

  Before (exclusive): 3.4.92

• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

  From (inclusive): 3.5

  Before (exclusive): 3.10.42

• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

  From (inclusive): 3.11

  Before (exclusive): 3.12.22

• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

  From (inclusive): 3.13

  Before (exclusive): 3.14.6

• cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*

• cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*

• cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*

• cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp3:*:*:*:*:*:*

• cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp3:*:*:*:*:*:*

• cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*

• cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*

• cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*

• cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*

• cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

• cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

• cpe:2.3:o:oracle:linux:5:-:*:*:*:*:*:*

• cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*

These are NVD CPE applicability entries. Some products depend on configuration conditions; consult the official record to confirm applicability.

Advisories and references

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e9c243a5a6de0be8e584c604d353412584b592f8

  Broken Link

• http://linux.oracle.com/errata/ELSA-2014-0771.html

  Third Party Advisory

• http://linux.oracle.com/errata/ELSA-2014-3037.html

  Third Party Advisory

• http://linux.oracle.com/errata/ELSA-2014-3038.html

  Third Party Advisory

• http://linux.oracle.com/errata/ELSA-2014-3039.html

  Third Party Advisory

• http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.html

  Mailing List · Third Party Advisory

• http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.html

  Mailing List · Third Party Advisory

• http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.html

  Mailing List · Third Party Advisory

• http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.html

  Mailing List · Third Party Advisory

• http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html

  Mailing List · Third Party Advisory

• http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html

  Mailing List · Third Party Advisory

• http://openwall.com/lists/oss-security/2014/06/05/24

  Mailing List

• http://openwall.com/lists/oss-security/2014/06/06/20

  Mailing List

• http://rhn.redhat.com/errata/RHSA-2014-0800.html

  Third Party Advisory

• http://secunia.com/advisories/58500

  Broken Link

• http://secunia.com/advisories/58990

  Broken Link

• http://secunia.com/advisories/59029

  Broken Link

• http://secunia.com/advisories/59092

  Broken Link

• http://secunia.com/advisories/59153

  Broken Link

• http://secunia.com/advisories/59262

  Broken Link

• http://secunia.com/advisories/59309

  Broken Link

• http://secunia.com/advisories/59386

  Broken Link

• http://secunia.com/advisories/59599

  Broken Link

• http://www.debian.org/security/2014/dsa-2949

  Exploit

• http://www.exploit-db.com/exploits/35370

  Third Party Advisory · VDB Entry

• http://www.openwall.com/lists/oss-security/2014/06/05/22

  Mailing List

• http://www.openwall.com/lists/oss-security/2021/02/01/4

  Mailing List

• http://www.securityfocus.com/bid/67906

  Broken Link · Third Party Advisory · VDB Entry

• http://www.securitytracker.com/id/1030451

  Broken Link · Third Party Advisory · VDB Entry

• http://www.ubuntu.com/usn/USN-2237-1

  Third Party Advisory

• http://www.ubuntu.com/usn/USN-2240-1

  Third Party Advisory

• https://bugzilla.redhat.com/show_bug.cgi?id=1103626

  Issue Tracking · Third Party Advisory

• https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html

  Exploit

• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e

  Mailing List · Patch

• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a217887a7b658e2650c3feff22756ab80c7339

  Mailing List · Patch

• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270

  Mailing List · Patch

• https://github.com/elongl/CVE-2014-3153

  Third Party Advisory

• https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8

  Patch

• https://www.openwall.com/lists/oss-security/2021/02/01/4

  Mailing List

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e9c243a5a6de0be8e584c604d353412584b592f8

  Broken Link

• http://linux.oracle.com/errata/ELSA-2014-0771.html

  Third Party Advisory

• http://linux.oracle.com/errata/ELSA-2014-3037.html

  Third Party Advisory

• http://linux.oracle.com/errata/ELSA-2014-3038.html

  Third Party Advisory

• http://linux.oracle.com/errata/ELSA-2014-3039.html

  Third Party Advisory

• http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.html

  Mailing List · Third Party Advisory

• http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.html

  Mailing List · Third Party Advisory

• http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.html

  Mailing List · Third Party Advisory

• http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.html

  Mailing List · Third Party Advisory

• http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html

  Mailing List · Third Party Advisory

• http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html

  Mailing List · Third Party Advisory

• http://openwall.com/lists/oss-security/2014/06/05/24

  Mailing List

• http://openwall.com/lists/oss-security/2014/06/06/20

  Mailing List

• http://rhn.redhat.com/errata/RHSA-2014-0800.html

  Third Party Advisory

• http://secunia.com/advisories/58500

  Broken Link

• http://secunia.com/advisories/58990

  Broken Link

• http://secunia.com/advisories/59029

  Broken Link

• http://secunia.com/advisories/59092

  Broken Link

• http://secunia.com/advisories/59153

  Broken Link

• http://secunia.com/advisories/59262

  Broken Link

• http://secunia.com/advisories/59309

  Broken Link

• http://secunia.com/advisories/59386

  Broken Link

• http://secunia.com/advisories/59599

  Broken Link

• http://www.debian.org/security/2014/dsa-2949

  Exploit

• http://www.exploit-db.com/exploits/35370

  Third Party Advisory · VDB Entry

• http://www.openwall.com/lists/oss-security/2014/06/05/22

  Mailing List

• http://www.openwall.com/lists/oss-security/2021/02/01/4

  Mailing List

• http://www.securityfocus.com/bid/67906

  Broken Link · Third Party Advisory · VDB Entry

• http://www.securitytracker.com/id/1030451

  Broken Link · Third Party Advisory · VDB Entry

• http://www.ubuntu.com/usn/USN-2237-1

  Third Party Advisory

• http://www.ubuntu.com/usn/USN-2240-1

  Third Party Advisory

• https://bugzilla.redhat.com/show_bug.cgi?id=1103626

  Issue Tracking · Third Party Advisory

• https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html

  Exploit

• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e

  Mailing List · Patch

• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a217887a7b658e2650c3feff22756ab80c7339

  Mailing List · Patch

• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270

  Mailing List · Patch

• https://github.com/elongl/CVE-2014-3153

  Third Party Advisory

• https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8

  Patch

• https://www.openwall.com/lists/oss-security/2021/02/01/4

  Mailing List

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-3153

  US Government Resource

Explore official sources

Read the official NVD record ↗

Explore the CISA catalog ↗

Back to CVE intelligence