CVE-2014-3940

The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numa_maps read operations during hugepage migration, related to fs/proc/task_mmu.c and mm/mempolicy.c.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4 UNKNOWN
LOCAL
HIGH
AV:L/AC:H/Au:N/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
Affected Products (NVD)
VendorProductVersion
redhatenterprise_linux
6.0
redhatenterprise_mrg
2.0
linuxlinux_kernel
𝑥
≤ 3.14.5
linuxlinux_kernel
3.14
linuxlinux_kernel
3.14:rc1
linuxlinux_kernel
3.14:rc2
linuxlinux_kernel
3.14:rc3
linuxlinux_kernel
3.14:rc4
linuxlinux_kernel
3.14:rc5
linuxlinux_kernel
3.14:rc6
linuxlinux_kernel
3.14:rc7
linuxlinux_kernel
3.14:rc8
linuxlinux_kernel
3.14.1
linuxlinux_kernel
3.14.2
linuxlinux_kernel
3.14.3
linuxlinux_kernel
3.14.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.226-1
fixed
sid
6.11.6-1
fixed
trixie
6.11.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
lucid
not-affected
precise
not-affected
saucy
ignored
trusty
Fixed 3.13.0-32.57
released
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
linux-armadaxp
lucid
dne
precise
not-affected
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-aws
precise
dne
trusty
not-affected
xenial
not-affected
yakkety
dne
zesty
dne
linux-ec2
lucid
not-affected
precise
dne
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-flo
lucid
dne
precise
dne
saucy
dne
trusty
dne
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
dne
linux-fsl-imx51
lucid
ignored
precise
dne
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-gke
precise
dne
trusty
dne
xenial
not-affected
yakkety
dne
zesty
dne
linux-goldfish
lucid
dne
precise
dne
saucy
ignored
trusty
dne
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
linux-grouper
lucid
dne
precise
dne
saucy
ignored
trusty
dne
utopic
ignored
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-hwe
precise
dne
trusty
dne
xenial
not-affected
yakkety
dne
zesty
dne
linux-hwe-edge
precise
dne
trusty
dne
xenial
not-affected
yakkety
dne
zesty
dne
linux-linaro-omap
lucid
dne
precise
ignored
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-linaro-shared
lucid
dne
precise
ignored
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-linaro-vexpress
lucid
dne
precise
ignored
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-quantal
lucid
dne
precise
not-affected
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-raring
lucid
dne
precise
not-affected
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-saucy
lucid
dne
precise
not-affected
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-trusty
lucid
dne
precise
Fixed 3.13.0-32.57~precise1
released
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-utopic
lucid
dne
precise
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-vivid
lucid
dne
precise
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-wily
precise
dne
trusty
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-lts-xenial
precise
dne
trusty
not-affected
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-maguro
lucid
dne
precise
dne
saucy
ignored
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-mako
lucid
dne
precise
dne
saucy
ignored
trusty
dne
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
dne
linux-manta
lucid
dne
precise
dne
saucy
ignored
trusty
dne
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
dne
yakkety
dne
zesty
dne
linux-mvl-dove
lucid
ignored
precise
dne
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-qcm-msm
lucid
ignored
precise
ignored
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
linux-raspi2
precise
dne
trusty
dne
vivid
dne
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
linux-snapdragon
precise
dne
trusty
dne
wily
dne
xenial
not-affected
yakkety
not-affected
zesty
not-affected
linux-ti-omap4
lucid
dne
precise
not-affected
saucy
ignored
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
kernel
RHEL 6
0:2.6.32-573.el6
fixed
RHEL 7
0:3.10.0-229.el7
fixed
kernel-abi-whitelists
RHEL 6
0:2.6.32-573.el6
fixed
RHEL 7
0:3.10.0-229.el7
fixed
kernel-bootwrapper
RHEL 6
0:2.6.32-573.el6
fixed
RHEL 7
0:3.10.0-229.el7
fixed
kernel-debug
RHEL 6
0:2.6.32-573.el6
fixed
RHEL 7
0:3.10.0-229.el7
fixed
kernel-debug-devel
RHEL 6
0:2.6.32-573.el6
fixed
RHEL 7
0:3.10.0-229.el7
fixed
kernel-devel
RHEL 6
0:2.6.32-573.el6
fixed
RHEL 7
0:3.10.0-229.el7
fixed
kernel-doc
RHEL 6
0:2.6.32-573.el6
fixed
RHEL 7
0:3.10.0-229.el7
fixed
kernel-firmware
RHEL 6
0:2.6.32-573.el6
fixed
kernel-headers
RHEL 6
0:2.6.32-573.el6
fixed
RHEL 7
0:3.10.0-229.el7
fixed
kernel-kdump
RHEL 6
0:2.6.32-573.el6
fixed
RHEL 7
0:3.10.0-229.el7
fixed
kernel-kdump-devel
RHEL 6
0:2.6.32-573.el6
fixed
RHEL 7
0:3.10.0-229.el7
fixed
kernel-tools
RHEL 7
0:3.10.0-229.el7
fixed
kernel-tools-libs
RHEL 7
0:3.10.0-229.el7
fixed
kernel-tools-libs-devel
RHEL 7
0:3.10.0-229.el7
fixed
perf
RHEL 6
0:2.6.32-573.el6
fixed
RHEL 7
0:3.10.0-229.el7
fixed
python-perf
RHEL 6
0:2.6.32-573.el6
fixed
RHEL 7
0:3.10.0-229.el7
fixed
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2015-0290.html
http://rhn.redhat.com/errata/RHSA-2015-1272.html
http://secunia.com/advisories/59011
http://secunia.com/advisories/61310
http://www.openwall.com/lists/oss-security/2014/06/02/5
http://www.securityfocus.com/bid/67786
https://bugzilla.redhat.com/show_bug.cgi?id=1104097
https://lkml.org/lkml/2014/3/18/784
https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html
http://rhn.redhat.com/errata/RHSA-2015-0290.html
http://rhn.redhat.com/errata/RHSA-2015-1272.html
http://secunia.com/advisories/59011
http://secunia.com/advisories/61310
http://www.openwall.com/lists/oss-security/2014/06/02/5
http://www.securityfocus.com/bid/67786
https://bugzilla.redhat.com/show_bug.cgi?id=1104097
https://lkml.org/lkml/2014/3/18/784
https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html