CVEvulnerability

CVE-2014-3940

4.0 MEDIUM Published 2014-06-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-06-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:L/AC:H/Au:N/C:N/I:N/A:C
Weaknesses
CWE-362

Description

The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numa_maps read operations during hugepage migration, related to fs/proc/task_mmu.c and mm/mempolicy.c.

Affected configurations

• redhat enterprise linux 6.0 • redhat enterprise mrg 2.0 • linux linux kernel (<= 3.14.5) • linux linux kernel 3.14 • linux linux kernel 3.14.1 • linux linux kernel 3.14.2 • linux linux kernel 3.14.3 • linux linux kernel 3.14.4

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References