CVE-2014-1874: Input Validation
Last updated 24 July 2024
Other sources
Linux kernel built with the NSA SELinux Support(CONFIGSECURITYSELINUX) is vulnerable to a crash caused by an empty SELinux security context value. If a file has an empty security context, listing it via 'ls(1)' could trigger this crash. Only user/processes with CAPMACADMIN privileges are allowed to set the SELinux security context of a file.
A user/process with CAPMACADMIN privileges could use this flaw to crash the kernel, resulting in a DoS.
Upstream fix: ------------- -> http://marc.info/?l=selinux&m=139110025203759&w=2
— Red Hat
The securitycontexttosidcore function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a denial of service (system crash) by leveraging the CAPMACADMIN capability to set a zero-length security context.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.13.4 - Compensating control
Avoid allowing untrusted users/processes to obtain CAP_MAC_ADMIN privileges on systems with NSA SELinux Support (CONFIG_SECURITY_SELINUX), since CAP_MAC_ADMIN is required to set a zero-length/empty SELinux security context that triggers the kernel crash.
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1874?
CVE-2014-1874 is considered to have a high severity due to its potential to cause a crash in the Linux kernel.
How do I fix CVE-2014-1874?
To fix CVE-2014-1874, update the Linux kernel to version 5.10.223-1 or later, or ensure your system is running a patched version.
Which versions of Linux are affected by CVE-2014-1874?
CVE-2014-1874 affects multiple versions, including specific versions of Ubuntu and SUSE Linux, as well as any Linux kernel before 3.13.4.
Can exploiting CVE-2014-1874 lead to unauthorized access?
Exploiting CVE-2014-1874 can cause a denial of service but does not directly allow unauthorized access.
Who is impacted by CVE-2014-1874?
Users or processes with CAP_MAC_ADMIN privileges on affected Linux systems are primarily impacted by CVE-2014-1874.