CVE-2014-7825: High severity linux kernel vulnerability
An out-of-bounds memory access flaw was found in the Linux kernel's perf and ftrace subsystems.
On a system with syscall perf profiling on (CVE-2014-7825) an unprivileged local user could use this flaw to crash the system.
On a system with ftrace syscall tracing on (CVE-2014-7826) an unprivileged local user could use this flaw to crash the system or escalate their privileges on the system.
References: http://www.openwall.com/lists/oss-security/2014/11/06/11
Upstream fix: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=086ba77a6db00ed858ff07451bedee197df868c9
Acknowledgements:
Red Hat would like to thank Robert Święcki for reporting these issues.
Other sources
An out-of-bounds memory access flaw, CVE-2014-7825, was found in the syscall tracing functionality of the Linux kernel's perf subsystem. A local, unprivileged user could use this flaw to crash the system. Additionally, an out-of-bounds memory access flaw, CVE-2014-7826, was found in the syscall tracing functionality of the Linux kernel's ftrace subsystem. On a system with ftrace syscall tracing enabled, a local, unprivileged user could use this flaw to crash the system, or escalate their privileges.
kernel/trace/tracesyscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service (out-of-bounds read and OOPS) or bypass the ASLR protection mechanism via a crafted application.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2014-7825?
CVE-2014-7825 is classified as a high severity vulnerability due to the potential for an unprivileged local user to crash the system.
How do I fix CVE-2014-7825?
To fix CVE-2014-7825, you should update to the latest kernel version as specified in your distribution's advisory.
Which versions are affected by CVE-2014-7825?
CVE-2014-7825 affects Linux kernel versions from 2.6.32 to 3.17.3 and multiple versions in the 3.x series.
Can unprivileged local users exploit CVE-2014-7825?
Yes, unprivileged local users can exploit CVE-2014-7825 to trigger an out-of-bounds memory access, potentially crashing the system.
What components of the Linux kernel are involved in CVE-2014-7825?
CVE-2014-7825 impacts the perf and ftrace subsystems within the Linux kernel.