NetSight
IP …
high7.8

CVE-2014-7826

kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which all…

Impact

kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via a crafted application.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.32 before 3.2.65
from 3.3 before 3.4.106
from 3.5 before 3.10.60
from 3.11 before 3.12.33
from 3.13 before 3.14.24
from 3.15 before 3.16.35
OpensuseEvergreen
Version 11.4
SuseSuse Linux Enterprise Server
Version 11

Weakness classification

CWE-476

References