CVE-2014-2739 — Kernel: IB/core: crash while resolving passive side RoCE L2 address in cma req handler

Back Back to CVE browser

MEDIUM

Kernel: IB/core: crash while resolving passive side RoCE L2 address in cma req handler

Published Apr 14, 2014

4.6

MEDIUM

CVSS 2.0

EPSS 1.60%

Description

The cma_req_handler function in drivers/infiniband/core/cma.c in the Linux kernel 3.14.x through 3.14.1 attempts to resolve an RDMA over Converged Ethernet (aka RoCE) address that is properly resolved within a different module, which allows remote attackers to cause a denial of service (incorrect pointer dereference and system crash) via crafted network traffic.

Affected products

Red Hat Enterprise Linux 5

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise MRG 2

realtime-kernel

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise MRG 2	realtime-kernel	Not affected	n/a

Remediation

Red Hat statement

This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.

Metrics

1.60% 0.01604

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01604

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (12 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.60% (0.01604)	74.97th	v5 (v2026.06.15)
Jun 15, 2026	1.59% (0.01591)	72.40th	v5 (v2026.06.15)
Mar 30, 2025	0.38% (0.00379)	56.49th	v4 (v2025.03.14)
Mar 29, 2025	1.53% (0.01526)	69.55th	v4 (v2025.03.14)
Mar 17, 2025	0.29% (0.00288)	50.19th	v4 (v2025.03.14)
Dec 12, 2024	0.53% (0.00528)	77.79th	v3 (v2023.03.01)
Feb 8, 2024	0.53% (0.00528)	76.33th	v3 (v2023.03.01)
Mar 7, 2023	0.53% (0.00528)	73.46th	v3 (v2023.03.01)
Mar 6, 2023	1.21% (0.01213)	66.61th	v2 (v2022.01.01)
Feb 17, 2023	1.21% (0.01213)	66.22th	v2 (v2022.01.01)
Apr 1, 2022	1.21% (0.01213)	64.21th	v2 (v2022.01.01)
Feb 4, 2022	1.21% (0.01213)	40.54th	v2 (v2022.01.01)

Weaknesses (1)

CWE-20

Improper Input Validation

References (8)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b2853fd6c2d0f383dbdf7427e263eb576a633867
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2014/04/10/9
mailing-listx_refsource_MLISTPatch
http://www.securityfocus.com/bid/66716
vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2014-2739
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1085415
x_refsource_CONFIRMIssue Tracking
https://github.com/torvalds/linux/commit/b2853fd6c2d0f383dbdf7427e263eb576a633867
x_refsource_CONFIRMExploit
https://nvd.nist.gov/vuln/detail/CVE-2014-2739
https://www.cve.org/CVERecord?id=CVE-2014-2739

Link	Providers	Tags
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b2853fd6c2d0f383dbdf7427e263eb576a633867		x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2014/04/10/9		mailing-listx_refsource_MLISTPatch
http://www.securityfocus.com/bid/66716		vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2014-2739		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1085415		x_refsource_CONFIRMIssue Tracking
https://github.com/torvalds/linux/commit/b2853fd6c2d0f383dbdf7427e263eb576a633867		x_refsource_CONFIRMExploit
https://nvd.nist.gov/vuln/detail/CVE-2014-2739
https://www.cve.org/CVERecord?id=CVE-2014-2739