CVE-2014-0038

Key facts

CVSS score

6.9 (v2.0)

Severity

MEDIUM

CVSS vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Weakness (CWE)

CWE-20

EPSS score

35.5% (98th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2014-0135)

Published

February 6, 2014

NVD last modified

June 17, 2026

Status

Modified

Affected products

• linux / linux kernel
• opensuse / opensuse

References

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2def2ef2ae5f3990aabdbe8a755911902707d268(Third Party Advisory, VDB Entry)
• http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html(Third Party Advisory, VDB Entry)
• http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html(Third Party Advisory, VDB Entry)
• http://pastebin.com/raw.php?i=DH3Lbg54(Exploit)
• http://secunia.com/advisories/56669(Not Applicable)
• http://www.exploit-db.com/exploits/31346(Third Party Advisory, VDB Entry)
• http://www.exploit-db.com/exploits/31347(Third Party Advisory, VDB Entry)
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.2(Third Party Advisory)
• http://www.mandriva.com/security/advisories?name=MDVSA-2014:038(Third Party Advisory)
• http://www.openwall.com/lists/oss-security/2014/01/31/2(Mailing List)
• http://www.securityfocus.com/bid/65255(Third Party Advisory, VDB Entry)
• http://www.ubuntu.com/usn/USN-2094-1(Third Party Advisory)
• http://www.ubuntu.com/usn/USN-2095-1(Third Party Advisory)
• http://www.ubuntu.com/usn/USN-2096-1(Third Party Advisory)
• https://bugzilla.redhat.com/show_bug.cgi?id=1060023(Issue Tracking)
• https://code.google.com/p/chromium/issues/detail?id=338594(Third Party Advisory)
• https://github.com/saelo/cve-2014-0038(Third Party Advisory)
• https://github.com/torvalds/linux/commit/2def2ef2ae5f3990aabdbe8a755911902707d268(Exploit, Patch)
• https://www.exploit-db.com/exploits/40503/(Third Party Advisory, VDB Entry)