CVE-2014-3180 - kernel: out-of-bounds read in kernel/compact.c

Back Back to CVE browser

CRITICAL

kernel: out-of-bounds read in kernel/compact.c

Published Nov 6, 2019

9.1

CRITICAL

CVSS 3.1

EPSS 1.04%

Description

In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restart_syscall uses uninitialized data when restarting compat_sys_nanosleep. NOTE: this is disputed because the code path is unreachable

Affected products

Vendor Linux Product Kernel Default
n/a
- Version
  before 3.17
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

Kernel

n/a

Version	Status	Constraints
before 3.17	affected	-

Red Hat Enterprise Linux 5

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-alt

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise MRG 2

kernel-rt

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-alt	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise MRG 2	kernel-rt	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (6)

https://access.redhat.com/security/cve/CVE-2014-3180
Vendor Advisory
https://bugs.chromium.org/p/chromium/issues/detail?id=408827
x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=1775121
Issue Tracking
https://lkml.org/lkml/2014/9/7/29
x_refsource_MISC
https://nvd.nist.gov/vuln/detail/CVE-2014-3180
https://www.cve.org/CVERecord?id=CVE-2014-3180

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2014-3180		Vendor Advisory
https://bugs.chromium.org/p/chromium/issues/detail?id=408827		x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=1775121		Issue Tracking
https://lkml.org/lkml/2014/9/7/29		x_refsource_MISC
https://nvd.nist.gov/vuln/detail/CVE-2014-3180
https://www.cve.org/CVERecord?id=CVE-2014-3180