Unrated severityNVD Advisory· Published May 11, 2014· Updated Jun 17, 2026
CVE-2014-1737
CVE-2014-1737
Description
The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:o:oracle:linux:5:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:oracle:linux:5:-:*:*:*:*:*:*
- cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:5.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_eus:5.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp3:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*+ 1 more
- cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*
- cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*
Patches
Vulnerability mechanics
References
18- git.kernel.orgnvd
- linux.oracle.com/errata/ELSA-2014-0771.htmlnvd
- linux.oracle.com/errata/ELSA-2014-3043.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.htmlnvd
- rhn.redhat.com/errata/RHSA-2014-0800.htmlnvd
- rhn.redhat.com/errata/RHSA-2014-0801.htmlnvd
- secunia.com/advisories/59262nvd
- secunia.com/advisories/59309nvd
- secunia.com/advisories/59406nvd
- secunia.com/advisories/59599nvd
- www.debian.org/security/2014/dsa-2926nvd
- www.debian.org/security/2014/dsa-2928nvd
- www.openwall.com/lists/oss-security/2014/05/09/2nvd
- www.securityfocus.com/bid/67300nvd
- www.securitytracker.com/id/1030474nvd
- bugzilla.redhat.com/show_bug.cginvd
- github.com/torvalds/linux/commit/ef87dbe7614341c2e7bfe8d32fcb7028cc97442cnvd
News mentions
0No linked articles in our index yet.