CVE-2014-3185: Buffer Overflow
Last updated 24 July 2024
Other sources
Linux kernel built with the USB Serial Converter support(USBSERIAL) along with a USB ConnectTech WhiteHEAT Serial Driver(CONFIGUSBSERIALWHITEHEAT) is vulnerable to a memory corruption flaw. It could occur when reading completion commands via USB Request Blocks buffers.
A local user with physical access to the system could use this flaw to corrupt kernel memory area or crash the system kernel resulting in DoS.
Upstream fix: ------------- -> https://git.kernel.org/linus/6817ae225cd650fb1c3295d769298c38b1eba818
— Red Hat
Multiple buffer overflows in the commandportreadcallback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel before 3.16.2 allow physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with a bulk response.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3185?
CVE-2014-3185 is classified as a high severity memory corruption vulnerability affecting the Linux kernel when using the USB Serial Converter support.
How do I fix CVE-2014-3185?
To remediate CVE-2014-3185, update your Linux kernel to a version that is not vulnerable, such as versions 5.10.223-1, 5.10.226-1, or later.
Which Linux kernel versions are affected by CVE-2014-3185?
CVE-2014-3185 affects various Linux kernel versions ranging from 3.2.0 to 3.16.1.
Can CVE-2014-3185 lead to exploitations?
Yes, CVE-2014-3185 can lead to system crashes or potentially allow remote code execution if exploited by an attacker.
Is CVE-2014-3185 fixed in the latest kernel versions?
Yes, CVE-2014-3185 has been fixed in later kernel releases, ensuring that systems running these versions are protected from the vulnerability.