CVEvulnerability

CVE-2014-0196

5.5 MEDIUM Known exploited Published 2014-05-07 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Linux Kernel Race Condition Vulnerability — Linux Kernel

Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.

Added to KEV: 2023-05-12
Remediation due: 2023-06-02
Ransomware use: Unknown
Required action: The impacted product is end-of-life and should be disconnected if still in use.
Notes: https://lkml.iu.edu/hypermail/linux/kernel/1609.1/02103.html; https://nvd.nist.gov/vuln/detail/CVE-2014-0196

Status: Analyzed
Published: 2014-05-07
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected]): 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses: CWE-362

Description

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

Affected configurations

• linux linux kernel (> 2.6.31 < 3.2.59) • linux linux kernel (>= 3.3 < 3.4.91) • linux linux kernel (>= 3.5 < 3.10.40) • linux linux kernel (>= 3.11 < 3.12.20) • linux linux kernel (>= 3.13 < 3.14.4) • linux linux kernel 2.6.31 • debian debian linux 6.0 • debian debian linux 7.0 • redhat enterprise linux 6.0 • redhat enterprise linux eus 6.3 • redhat enterprise linux eus 6.4 • redhat enterprise linux server eus 6.3 • suse suse linux enterprise desktop 11 • suse suse linux enterprise high availability extension 11 • suse suse linux enterprise server 11 • oracle linux 6 • canonical ubuntu linux 10.04 • canonical ubuntu linux 12.04 • canonical ubuntu linux 12.10 • canonical ubuntu linux 13.10 • canonical ubuntu linux 14.04 • f5 big-ip access policy manager (>= 11.1.0 <= 11.5.1) • f5 big-ip advanced firewall manager (>= 11.3.0 <= 11.5.1) • f5 big-ip analytics (>= 11.1.0 <= 11.5.1) • f5 big-ip application acceleration manager (>= 11.4.0 <= 11.5.1) • f5 big-ip application security manager (>= 11.1.0 <= 11.5.1) • f5 big-ip edge gateway (>= 11.1.0 <= 11.3.0) • f5 big-ip global traffic manager (>= 11.1.0 <= 11.5.1) • f5 big-ip link controller (>= 11.1.0 <= 11.5.1) • f5 big-ip local traffic manager (>= 11.1.0 <= 11.5.1) • f5 big-ip policy enforcement manager (>= 11.3.0 <= 11.5.1) • f5 big-ip protocol security module (>= 11.1.0 <= 11.4.1) • f5 big-ip wan optimization manager (>= 11.1.0 <= 11.3.0) • f5 big-ip webaccelerator (>= 11.1.0 <= 11.3.0) • f5 big-iq application delivery controller 4.5.0 • f5 big-iq centralized management 4.6.0 • f5 big-iq cloud (>= 4.0.0 <= 4.5.0) • f5 big-iq cloud and orchestration 1.0.0 • f5 big-iq device (>= 4.2.0 <= 4.5.0) • f5 big-iq security (>= 4.0.0 <= 4.5.0) • f5 enterprise manager 3.1.0 • f5 enterprise manager 3.1.1

Weakness · CWE (1)

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References