CVE-2014-2673: Input Validation
Last updated 24 July 2024
Other sources
The archduptaskstruct function in the Transactional Memory (TM) implementation in arch/powerpc/kernel/process.c in the Linux kernel before 3.13.7 on the powerpc platform does not properly interact with the clone and fork system calls, which allows local users to cause a denial of service (Program Check and system crash) via certain instructions that are executed with the processor in the Transactional state.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
linux kernel (powerpc)to a version that resolves this vulnerability.Fixed in 3.13.7
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2673?
CVE-2014-2673 has a severity rating that indicates a local user could exploit it to potentially gain unauthorized access or control.
How do I fix CVE-2014-2673?
To fix CVE-2014-2673, upgrade the Linux kernel to version 3.13.7 or later.
Which Linux kernel versions are affected by CVE-2014-2673?
The affected Linux kernel versions for CVE-2014-2673 are all versions prior to 3.13.7.
What type of vulnerability is CVE-2014-2673 classified as?
CVE-2014-2673 is classified as a vulnerability in the handling of clone and fork system calls in the Linux kernel.
Can CVE-2014-2673 be exploited remotely?
No, CVE-2014-2673 can only be exploited by local users on the affected systems.