CVE-2014-0069
- State
- Published
- Severity
- Not scored
- Published
- Feb 28, 2014
- Updated
- Aug 6, 2024
- Reserved
- Dec 3, 2013
Description
The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [linux-cifs] 20140214 [PATCH] cifs: ensure that uncached writes handle unmapped areas correctlymailing-list
- 65588vdb-entry
- https://github.com/torvalds/linux/commit/5d81de8e8667da7135d3a32a964087c0faf5483f
- RHSA-2014:0328vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1064253
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5d81de8e8667da7135d3a32a964087c0faf5483f
- [oss-security] 20140217 CVE-2014-0069 -- kernel: cifs: incorrect handling of bogus user pointers during uncached writesmailing-list
- SUSE-SU-2014:0459vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.