CVE-2014-1444: Low severity Linux Linux kernel vulnerability
Last updated 24 July 2024
Other sources
Linux kenrel built with the FarSync T-Series driver support(CONFIGFARSYNC) is vulnerable to an information leakage flaw. It could occur while doing an ioctl(SIOCWANDEV) call.
A user/program with CAPNETADMIN privileges could use this flaw to leak kernel memory bytes.
Upstream fix: ------------- -> https://git.kernel.org/linus/96b340406724d87e4621284ebac5e059d67b2194
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2014/01/15/3
— Red Hat
The fstgetiface function in drivers/net/wan/farsync.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory by leveraging the CAPNETADMIN capability for an SIOCWANDEV ioctl call.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.3-1 - Upgrade
Upgrade
Linux kernel (drivers/net/wan/farsync.c)to a version that resolves this vulnerability.Fixed in 3.11.7 - Compensating control
Restrict use of ioctl(SIOCWANDEV) and/or the Farsync T-Series driver interface to trusted users/administrators, since the flaw can be exploited by a user/program with CAP_NET_ADMIN privileges to leak kernel memory bytes.
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1444?
CVE-2014-1444 is considered a medium severity vulnerability due to its potential for information leakage.
How do I fix CVE-2014-1444?
To fix CVE-2014-1444, upgrade to a patched version of the Linux Kernel, specifically to versions after 3.11.6.
Who is affected by CVE-2014-1444?
Users with applications or systems running Linux Kernel versions 3.11 or lower, particularly with CAP_NET_ADMIN privileges, are affected by CVE-2014-1444.
What types of data can be leaked due to CVE-2014-1444?
CVE-2014-1444 allows the leakage of kernel memory bytes, which can potentially expose sensitive information.
Can CVE-2014-1444 be exploited remotely?
CVE-2014-1444 requires local access with administrative privileges, so it cannot be exploited remotely.