CVE-2014-1739: Infoleak
Last updated 24 July 2024
Other sources
Linux kernel built with the Multimedia support(CONFIGMEDIASUPPORT) to enable web-cam, video grabber devices, is vulnerable to an information leakage flaw. It could occur while doing an ioctl(2) call on a media device file.
A user/process able to access the /dev/media0 device file could use this flaw to leak kernel memory bytes.
Upstream fix: ------------- -> https://git.kernel.org/linus/e6a623460e5fc960ac3ee9f946d3106233fd28d8
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2014/06/15/1
— Red Hat
The mediadeviceenumentities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory by leveraging /dev/media0 read access for a MEDIAIOCENUMENTITIES ioctl call.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1739?
CVE-2014-1739 is classified as a low severity vulnerability.
How do I fix CVE-2014-1739?
To fix CVE-2014-1739, upgrade your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What systems are affected by CVE-2014-1739?
CVE-2014-1739 affects multiple systems including certain versions of the Linux kernel, Android, and specific Ubuntu and SUSE Linux distributions.
What type of vulnerability is CVE-2014-1739?
CVE-2014-1739 is an information leakage flaw that can be exploited during an ioctl(2) call on a media device file.
Who is impacted by CVE-2014-1739?
Users or processes with access to the /dev/media0 device file on affected systems may be impacted by CVE-2014-1739.