CVE-2014-3631: Null Pointer Dereference
A flaw was found in the way the termination condition in the associative array garbage collection functionality was handled when used from the keys subsystem.
A local unprivileged user could use this flaw to crash the system.
Introduced by: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b2a4df200d570b2c33a57e1ebfa5896e4bc81b69
Other sources
The assocarraygc function in the associative-array implementation in lib/assocarray.c in the Linux kernel before 3.16.3 does not properly implement garbage collection, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via multiple "keyctl newring" operations followed by a "keyctl timeout" operation.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3631?
CVE-2014-3631 has a severity level that can lead to a system crash when exploited.
How do I fix CVE-2014-3631?
To fix CVE-2014-3631, update your Linux kernel to version 3.16.4 or later.
Which versions of Linux are affected by CVE-2014-3631?
CVE-2014-3631 affects Linux kernel versions from 3.13 to 3.16.3.
Can CVE-2014-3631 be exploited by a remote attacker?
No, CVE-2014-3631 can only be exploited by a local unprivileged user on the system.
What type of flaw is described in CVE-2014-3631?
CVE-2014-3631 involves a flaw in the garbage collection functionality for associative arrays.