CVE-2014-3940: Race Condition
Last updated 24 July 2024
Other sources
Linux kernel built with the HugeTLB file system(CONFIGHUGETLBFS + CONFIGHUGETLBPAGE) along with Non Uniform Memory Access(CONFIGNUMA) support is vulnerable to possible race conditions. It could occur when kernel attempts to perform hugepage migration.
Upstream fix: ------------- -> https://lkml.org/lkml/2014/3/18/784 (only part 1 of the 2 patches) Ie: mm: add !ptepresent() check on existing hugetlbentry callbacks
Reference: ---------- -> http://seclists.org/oss-sec/2014/q2/399
— Red Hat
The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numamaps read operations during hugepage migration, related to fs/proc/taskmmu.c and mm/mempolicy.c.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3940?
CVE-2014-3940 is considered a moderate severity vulnerability due to potential race conditions in hugepage migration.
How do I fix CVE-2014-3940?
To fix CVE-2014-3940, update your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which operating systems are affected by CVE-2014-3940?
CVE-2014-3940 affects Red Hat Enterprise Linux 6.0, Red Hat Enterprise MRG 2.0, and various versions of the Linux Kernel up to 3.14.5.
What is the potential impact of CVE-2014-3940?
The potential impact of CVE-2014-3940 includes system instability or crashes due to race conditions during memory management operations.
Are there known exploits for CVE-2014-3940?
As of now, there are no publicly known exploits specifically targeting CVE-2014-3940.