Unrated severityNVD Advisory· Published Jun 5, 2014· Updated May 6, 2026
CVE-2014-3917
CVE-2014-3917
Description
kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain potentially sensitive single-bit values from kernel memory or cause a denial of service (OOPS) via a large value of a syscall number.
Affected products
18cpe:2.3:o:linux:linux_kernel:3.14:rc4:*:*:*:*:*:*+ 13 more
- cpe:2.3:o:linux:linux_kernel:3.14:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc7:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc8:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14.1:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14.2:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <=3.14.5
- cpe:2.3:o:linux:linux_kernel:3.14:-:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14.3:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14.4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_desktop:10.0:sp4:*:*:lts:*:*:*
cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- article.gmane.org/gmane.linux.kernel/1713179nvd
- lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.htmlnvd
- rhn.redhat.com/errata/RHSA-2014-1143.htmlnvd
- rhn.redhat.com/errata/RHSA-2014-1281.htmlnvd
- secunia.com/advisories/59777nvd
- secunia.com/advisories/60011nvd
- secunia.com/advisories/60564nvd
- www.openwall.com/lists/oss-security/2014/05/29/5nvd
- www.ubuntu.com/usn/USN-2334-1nvd
- www.ubuntu.com/usn/USN-2335-1nvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.