Vulnerability Description
kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via a crafted application.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 2.6.32, < 3.2.65 |
| Opensuse | Evergreen | 11.4 |
| Suse | Suse Linux Enterprise Server | 11 |
Related Weaknesses (CWE)
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1943.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0290.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0864.htmlThird Party Advisory
- http://www.openwall.com/lists/oss-security/2014/11/06/11Mailing ListPatchThird Party Advisory
- http://www.securityfocus.com/bid/70971Third Party AdvisoryVDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1161565Issue TrackingPatchThird Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98556Third Party AdvisoryVDB Entry
- https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868cExploitPatchThird Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1943.htmlThird Party Advisory
FAQ
What is CVE-2014-7826?
CVE-2014-7826 is a vulnerability with a CVSS score of 7.8 (HIGH). kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cau...
How severe is CVE-2014-7826?
CVE-2014-7826 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-7826?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Opensuse Evergreen, Suse Suse Linux Enterprise Server.