NetSight
IP …
high7.8

CVE-2014-7825

kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allow…

Impact

kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service (out-of-bounds read and OOPS) or bypass the ASLR protection mechanism via a crafted application.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.32 before 3.2.65
from 3.3 before 3.4.106
from 3.5 before 3.10.60
from 3.11 before 3.12.33
from 3.13 before 3.14.24
from 3.15 before 3.16.35

Weakness classification

CWE-125

References