CVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted...
HighCVSS 7.8
EPSS 37.2%
CISA KEV
added 2022-05-25 · due 2022-06-15
Exploited in the wild
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.
CISA Known Exploited Vulnerability
- Date added
- 2022-05-25
- Due date (FCEB)
- 2022-06-15
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 3.14.5-1 | 3.14.5-1 |
| debian/linux(Debian:13) | < 3.14.5-1 | 3.14.5-1 |
| debian/linux(Debian:14) | < 3.14.5-1 | 3.14.5-1 |
| Linux kernel | < 3.2.60 | 3.2.60 |
| Linux kernel | >= 3.3, < 3.4.92 | 3.4.92 |
| Linux kernel | >= 3.5, < 3.10.42 | 3.10.42 |
| Linux kernel | >= 3.11, < 3.12.22 | 3.12.22 |
| Linux kernel | >= 3.13, < 3.14.6 | 3.14.6 |
| redhat enterprise linux server aus | = 6.2 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp3 | No fix listed |
| SUSE linux enterprise high availability extension | = 11-sp3 | No fix listed |
| SUSE linux enterprise real time extension | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 11 | No fix listed |
| SUSE linux enterprise server | = 11-sp2 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| oracle linux | = 5 | No fix listed |
| oracle linux | = 6 | No fix listed |
References
- Debian Security Tracker CVE-2014-3153 vendor-advisory
- git.kernel.org broken-link
- linux.oracle.com third-party-advisory
- linux.oracle.com third-party-advisory
- linux.oracle.com third-party-advisory
- linux.oracle.com third-party-advisory
- SUSE-SU-2014:0775 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2014:0796 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2014:0837 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:0878 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2014:1316 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2014:1319 mailing-list third-party-advisory vendor-advisory
- [oss-security] 20140605 Re: Linux kernel futex local privilege escalation (CVE-2014-3153) mailing-list
- [oss-security] 20140606 Re: Linux kernel futex local privilege escalation (CVE-2014-3153) mailing-list
- RHSA-2014:0800 third-party-advisory vendor-advisory
- 58500 broken-link third-party-advisory
- 58990 broken-link third-party-advisory
- 59029 broken-link third-party-advisory
- 59092 broken-link third-party-advisory
- 59153 broken-link third-party-advisory
- 59262 broken-link third-party-advisory
- 59309 broken-link third-party-advisory
- 59386 broken-link third-party-advisory
- 59599 broken-link third-party-advisory
- DSA-2949 exploit vendor-advisory
- 35370 exploit third-party-advisory vdb-entry
- [oss-security] 20140605 Linux kernel futex local privilege escalation (CVE-2014-3153) mailing-list
- [oss-security] 20210201 Re: Linux Kernel: local priv escalation via futexes mailing-list
- 67906 broken-link third-party-advisory vdb-entry
- 1030451 broken-link third-party-advisory vdb-entry
- USN-2237-1 third-party-advisory vendor-advisory
- USN-2240-1 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- elongl.github.io exploit
- git.kernel.org mailing-list patch
- git.kernel.org mailing-list patch
- git.kernel.org mailing-list patch
- github.com third-party-advisory
- github.com patch
- www.openwall.com mailing-list
- www.cisa.gov government-resource us-government-resource