Unrated severityNVD Advisory· Published May 11, 2014· Updated May 6, 2026
CVE-2014-1737
CVE-2014-1737
Description
The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.
Affected products
12cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:oracle:linux:5:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:oracle:linux:5:-:*:*:*:*:*:*
- cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:5.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_eus:5.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp3:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*+ 1 more
- cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*
- cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
17- linux.oracle.com/errata/ELSA-2014-0771.htmlnvd
- linux.oracle.com/errata/ELSA-2014-3043.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.htmlnvd
- rhn.redhat.com/errata/RHSA-2014-0800.htmlnvd
- rhn.redhat.com/errata/RHSA-2014-0801.htmlnvd
- secunia.com/advisories/59262nvd
- secunia.com/advisories/59309nvd
- secunia.com/advisories/59406nvd
- secunia.com/advisories/59599nvd
- www.debian.org/security/2014/dsa-2926nvd
- www.debian.org/security/2014/dsa-2928nvd
- www.openwall.com/lists/oss-security/2014/05/09/2nvd
- www.securityfocus.com/bid/67300nvd
- www.securitytracker.com/id/1030474nvd
- bugzilla.redhat.com/show_bug.cginvd
- github.com/torvalds/linux/commit/ef87dbe7614341c2e7bfe8d32fcb7028cc97442cnvd
News mentions
0No linked articles in our index yet.