CVE-2014-4508
medium
CVSS v3
—
CVSS v4 NEW
—
VIR risk
4.7
Description
arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to cause a denial of service (OOPS and system crash) via an invalid syscall number, as demonstrated by number 1000.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| sles | affected | | |
| debian | bookworm | fixed | 3.14.9-1 |
| debian | bullseye | fixed | 3.14.9-1 |
| debian | forky | fixed | 3.14.9-1 |
| debian | sid | fixed | 3.14.9-1 |
| debian | trixie | fixed | 3.14.9-1 |
| ubuntu | 12.04 | affected | |
| linux-kernel | affected | |
References
- https://www.suse.com/security/cve/CVE-2014-4508.html
- http://article.gmane.org/gmane.linux.kernel/1726110
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
- http://openwall.com/lists/oss-security/2014/06/20/1
- http://secunia.com/advisories/58964
- http://secunia.com/advisories/60564
- http://www.openwall.com/lists/oss-security/2014/06/20/10
- http://www.openwall.com/lists/oss-security/2020/11/12/3
- http://www.securityfocus.com/bid/68126
- http://www.ubuntu.com/usn/USN-2334-1
- https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.61
- https://security-tracker.debian.org/tracker/CVE-2014-4508
CWEs
CWE-189
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.