CVEvulnerability

CVE-2014-1737

7.2 HIGH Published 2014-05-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-05-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-754

Description

The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.

Affected configurations

• linux linux kernel (< 3.2.59) • linux linux kernel (>= 3.3 < 3.4.90) • linux linux kernel (>= 3.5 < 3.10.40) • linux linux kernel (>= 3.11 < 3.12.20) • linux linux kernel (>= 3.13 < 3.14.4) • oracle linux 5 • oracle linux 6 • debian debian linux 6.0 • debian debian linux 7.0 • suse linux enterprise desktop 11 • suse linux enterprise high availability extension 11 • suse linux enterprise real time extension 11 • suse linux enterprise server 11 • redhat enterprise linux eus 5.6 • redhat enterprise linux eus 6.3

Related

Weakness · CWE (1)

  • CWE-754 Improper Check for Unusual or Exceptional Conditions weakness

References