Unrated severityNVD Advisory· Published Jun 5, 2014· Updated May 6, 2026
CVE-2014-3940
CVE-2014-3940
Description
The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numa_maps read operations during hugepage migration, related to fs/proc/task_mmu.c and mm/mempolicy.c.
Affected products
16cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <=3.14.5
- cpe:2.3:o:linux:linux_kernel:3.14:-:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14.1:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14.2:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14.3:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14.4:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc7:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:3.14:rc8:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- rhn.redhat.com/errata/RHSA-2015-0290.htmlnvd
- rhn.redhat.com/errata/RHSA-2015-1272.htmlnvd
- secunia.com/advisories/59011nvd
- secunia.com/advisories/61310nvd
- www.openwall.com/lists/oss-security/2014/06/02/5nvd
- www.securityfocus.com/bid/67786nvd
- bugzilla.redhat.com/show_bug.cginvd
- lkml.org/lkml/2014/3/18/784nvd
- support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.htmlnvd
News mentions
0No linked articles in our index yet.