CVEvulnerability

CVE-2014-1738

2.1 LOW Published 2014-05-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-05-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.

Affected configurations

• linux linux kernel (<= 3.14.3) • redhat enterprise linux eus 5.6 • redhat enterprise linux eus 6.3 • debian debian linux 6.0 • debian debian linux 7.0 • oracle linux 5 • oracle linux 6 • suse linux enterprise desktop 11 • suse linux enterprise high availability extension 11 • suse linux enterprise real time extension 11 • suse linux enterprise server 11

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References