Unrated severityNVD Advisory· Published Jun 23, 2014· Updated Jun 17, 2026
CVE-2014-4027
CVE-2014-4027
Description
The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp3:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*+ 1 more
- cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*
- cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*
Patches
Vulnerability mechanics
References
14- www.openwall.com/lists/oss-security/2014/06/11/1nvdMailing ListPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- github.com/torvalds/linux/commit/4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dcnvdPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.htmlnvdMailing ListThird Party Advisory
- www.ubuntu.com/usn/USN-2334-1nvdThird Party Advisory
- www.ubuntu.com/usn/USN-2335-1nvdThird Party Advisory
- support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.htmlnvdThird Party Advisory
- permalink.gmane.org/gmane.linux.scsi.target.devel/6618nvdBroken Link
- secunia.com/advisories/59134nvdBroken Link
- secunia.com/advisories/59777nvdBroken Link
- secunia.com/advisories/60564nvdBroken Link
- secunia.com/advisories/61310nvdBroken Link
- git.kernel.orgnvd
News mentions
0No linked articles in our index yet.