CVE-2014-3180: Critical severity linux kernel vulnerability
Published Nov 6, 2019
·Updated
DISPUTED In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restartsyscall uses uninitialized data when restarting compatsysnanosleep. NOTE: this is disputed because the code path is unreachable.
Affected Software
2 affected components
Linux Linux kernel<3.17
Google Chrome OS
Remediation
Patch Available
Event History
Nov 6, 2019
CVE Published
via MITRE·07:22 PM
Data Sourced
via MITRE·07:22 PM
DescriptionWeakness
Disputed
08:15 PM
Frequently Asked Questions
1
What is the severity of CVE-2014-3180?
CVE-2014-3180 is considered potentially serious due to a possible out-of-bounds read in the Linux kernel.
2
How do I fix CVE-2014-3180?
To address CVE-2014-3180, upgrade your Linux kernel to version 3.17 or later.
3
Which software is affected by CVE-2014-3180?
CVE-2014-3180 affects the Linux kernel versions before 3.17 and Google Chrome OS.
4
What type of vulnerability is CVE-2014-3180?
CVE-2014-3180 is classified as a possible out-of-bounds read vulnerability.
5
Is the code path for CVE-2014-3180 reachable?
The code path for CVE-2014-3180 is disputed as being unreachable, leading to further debate on its impact.