CVE-2014-1738: Infoleak
A flaw was found in the way the Linux kernel's floppy driver handled user space provided data in certain error code paths while processing FDRAWCMD IOCTL commands. A local user with write access to /dev/fdX could use this flaw to free (using the kfree() function) arbitrary kernel memory. (CVE-2014-1737, Important) It was found that the Linux kernel's floppy driver leaked internal kernel memory addresses to user space during the processing of the FDRAWCMD IOCTL command. A local user with write access to /dev/fdX could use this flaw to obtain information about the kernel heap arrangement. (CVE-2014-1738, Low) Note: A local user with write access to /dev/fdX could use these two flaws (CVE-2014-1737 in combination with CVE-2014-1738) to escalate their privileges on the system.
Other sources
The rawcmdcopyout function in drivers/block/floppy.c in the Linux ke ...
— Debian
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2014-1738?
CVE-2014-1738 is classified as a moderate severity vulnerability due to its potential for local exploitation to free arbitrary kernel memory.
How do I fix CVE-2014-1738?
To fix CVE-2014-1738, update the Linux kernel to a version that includes the patch to address this vulnerability.
What systems are affected by CVE-2014-1738?
CVE-2014-1738 affects various versions of the Linux kernel, particularly those prior to version 3.14.3.
Can CVE-2014-1738 be exploited remotely?
No, CVE-2014-1738 requires local access to the system to exploit the vulnerability.
Which distributions have issued patches for CVE-2014-1738?
Distributions like Red Hat Enterprise Linux, Debian, and Oracle Linux have released updates to patch CVE-2014-1738.