CVE-2014-3153

Known Exploited Public Exploit

Description

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

7.8

CVSS

Severity: High

CVSS 3.1 •

CVSS 2.0 •

EPSS 82.59% Top 5%

KEV Since

Vendor Advisory opensuse.org Vendor Advisory debian.org Vendor Advisory opensuse.org Vendor Advisory opensuse.org Vendor Advisory opensuse.org Vendor Advisory redhat.com Vendor Advisory ubuntu.com Vendor Advisory opensuse.org Vendor Advisory ubuntu.com Vendor Advisory opensuse.org

Affected: n/a n/a

References

Link	Tags
http://www.securityfocus.com/bid/67906	vdb entry third party advisory broken link
http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.html	mailing list third party advisory vendor advisory
http://openwall.com/lists/oss-security/2014/06/05/24	mailing list
http://secunia.com/advisories/59029	third party advisory broken link
http://www.debian.org/security/2014/dsa-2949	vendor advisory exploit
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html	mailing list third party advisory vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.html	mailing list third party advisory vendor advisory
http://secunia.com/advisories/59262	third party advisory broken link
http://secunia.com/advisories/58990	third party advisory broken link
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e	mailing list patch
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a217887a7b658e2650c3feff22756ab80c7339	mailing list patch
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e9c243a5a6de0be8e584c604d353412584b592f8	broken link
http://linux.oracle.com/errata/ELSA-2014-3037.html	third party advisory
http://secunia.com/advisories/59153	third party advisory broken link
http://openwall.com/lists/oss-security/2014/06/06/20	mailing list
http://secunia.com/advisories/59309	third party advisory broken link
https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8	patch
http://www.securitytracker.com/id/1030451	vdb entry third party advisory broken link
http://linux.oracle.com/errata/ELSA-2014-0771.html	third party advisory
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.html	mailing list third party advisory vendor advisory
http://rhn.redhat.com/errata/RHSA-2014-0800.html	third party advisory vendor advisory
http://www.ubuntu.com/usn/USN-2237-1	third party advisory vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html	mailing list third party advisory vendor advisory
http://linux.oracle.com/errata/ELSA-2014-3039.html	third party advisory
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270	mailing list patch
http://secunia.com/advisories/58500	third party advisory broken link
http://www.ubuntu.com/usn/USN-2240-1	third party advisory vendor advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1103626	issue tracking third party advisory
http://secunia.com/advisories/59386	third party advisory broken link
http://www.exploit-db.com/exploits/35370	exploit vdb entry third party advisory
http://secunia.com/advisories/59599	third party advisory broken link
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.html	mailing list third party advisory vendor advisory
http://www.openwall.com/lists/oss-security/2014/06/05/22	mailing list
http://secunia.com/advisories/59092	third party advisory broken link
http://linux.oracle.com/errata/ELSA-2014-3038.html	third party advisory
http://www.openwall.com/lists/oss-security/2021/02/01/4	mailing list
https://www.openwall.com/lists/oss-security/2021/02/01/4	mailing list
https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html	exploit
https://github.com/elongl/CVE-2014-3153	third party advisory

Frequently Asked Questions

What is the severity of CVE-2014-3153?: CVE-2014-3153 has been scored as a high severity vulnerability.
How to fix CVE-2014-3153?: To fix CVE-2014-3153, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2014-3153 being actively exploited in the wild?: It is confirmed that CVE-2014-3153 is actively exploited. Be extra cautious if you are using vulnerable components. According to its EPSS score, there is a ~83% probability that this vulnerability will be exploited by malicious actors in the next 30 days.