CVE-2014-7825: High severity Linux Linux kernel vulnerability
An out-of-bounds memory access flaw was found in the Linux kernel's perf and ftrace subsystems.
On a system with syscall perf profiling on (CVE-2014-7825) an unprivileged local user could use this flaw to crash the system.
On a system with ftrace syscall tracing on (CVE-2014-7826) an unprivileged local user could use this flaw to crash the system or escalate their privileges on the system.
References: http://www.openwall.com/lists/oss-security/2014/11/06/11
Upstream fix: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=086ba77a6db00ed858ff07451bedee197df868c9
Acknowledgements:
Red Hat would like to thank Robert Święcki for reporting these issues.
Other sources
An out-of-bounds memory access flaw, CVE-2014-7825, was found in the syscall tracing functionality of the Linux kernel's perf subsystem. A local, unprivileged user could use this flaw to crash the system. Additionally, an out-of-bounds memory access flaw, CVE-2014-7826, was found in the syscall tracing functionality of the Linux kernel's ftrace subsystem. On a system with ftrace syscall tracing enabled, a local, unprivileged user could use this flaw to crash the system, or escalate their privileges.
kernel/trace/tracesyscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service (out-of-bounds read and OOPS) or bypass the ASLR protection mechanism via a crafted application.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:2.6.32-504.16.2.el6 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-229.el7 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:3.10.58-rt62.58.el6 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 3.13.0-41.70 - Upgrade
Upgrade
ubuntu/linux-lts-utopicto a version that resolves this vulnerability.Fixed in 3.16.0-26.35~14.04.1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch 086ba77a6db00ed858ff07451bedee197df868c9
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2014-7825?
CVE-2014-7825 is classified as a high severity vulnerability due to the potential for an unprivileged local user to crash the system.
How do I fix CVE-2014-7825?
To fix CVE-2014-7825, you should update to the latest kernel version as specified in your distribution's advisory.
Which versions are affected by CVE-2014-7825?
CVE-2014-7825 affects Linux kernel versions from 2.6.32 to 3.17.3 and multiple versions in the 3.x series.
Can unprivileged local users exploit CVE-2014-7825?
Yes, unprivileged local users can exploit CVE-2014-7825 to trigger an out-of-bounds memory access, potentially crashing the system.
What components of the Linux kernel are involved in CVE-2014-7825?
CVE-2014-7825 impacts the perf and ftrace subsystems within the Linux kernel.