NetSight
IP …
high7.2

CVE-2014-3534

arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_…

Impact

arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_AREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a crafted application that makes a ptrace system call.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.62
from 3.3 before 3.4.101
from 3.5 before 3.10.51
from 3.11 before 3.12.27
from 3.13 before 3.14.15
from 3.15 before 3.15.8
DebianDebian Linux
Version 7.0

Weakness classification

CWE-269

References