CVE-2014-3940 — Kernel: missing check during hugepage migration

Back Back to CVE browser

MEDIUM

Kernel: missing check during hugepage migration

Published Jun 5, 2014

4.0

MEDIUM

CVSS 2.0

EPSS 0.27%

Description

The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numa_maps read operations during hugepage migration, related to fs/proc/task_mmu.c and mm/mempolicy.c.

Affected products

Red Hat Enterprise Linux 6

kernel-0:2.6.32-573.el6

Fixed · RHSA-2015:1272
Red Hat Enterprise Linux 7

kernel-0:3.10.0-229.el7

Fixed · RHSA-2015:0290
Red Hat Enterprise MRG 2

kernel-rt-0:3.10.33-rt32.43.el6rt

Fixed · RHSA-2014:0913
Red Hat Enterprise Linux 5

kernel

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel-0:2.6.32-573.el6	Fixed	RHSA-2015:1272
Red Hat Enterprise Linux 7	kernel-0:3.10.0-229.el7	Fixed	RHSA-2015:0290
Red Hat Enterprise MRG 2	kernel-rt-0:3.10.33-rt32.43.el6rt	Fixed	RHSA-2014:0913
Red Hat Enterprise Linux 5	kernel	Not affected	n/a

Remediation

Red Hat statement

This issue did not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.

Metrics

0.27% 0.00274

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00274

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.27% (0.00274)	17.91th	v5 (v2026.06.15)
Jun 15, 2026	0.27% (0.00274)	18.92th	v5 (v2026.06.15)
Mar 17, 2025	0.08% (0.00083)	21.83th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00042)	5.07th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	1.28% (0.01282)	68.34th	v2 (v2022.01.01)
Feb 22, 2023	1.28% (0.01282)	68.05th	v2 (v2022.01.01)
Apr 1, 2022	1.28% (0.01282)	65.91th	v2 (v2022.01.01)
Feb 4, 2022	1.28% (0.01282)	41.72th	v2 (v2022.01.01)

Weaknesses (1)

CWE-362

Race Condition

References (12)

http://rhn.redhat.com/errata/RHSA-2015-0290.html
vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1272.html
vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/59011
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/61310
third-party-advisoryx_refsource_SECUNIA
http://www.openwall.com/lists/oss-security/2014/06/02/5
mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/67786
vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2014-3940
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1104097
x_refsource_CONFIRMIssue Tracking
https://lkml.org/lkml/2014/3/18/784
mailing-listx_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2014-3940
https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html
x_refsource_CONFIRM
https://www.cve.org/CVERecord?id=CVE-2014-3940

Link	Providers	Tags
http://rhn.redhat.com/errata/RHSA-2015-0290.html		vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1272.html		vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/59011		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/61310		third-party-advisoryx_refsource_SECUNIA
http://www.openwall.com/lists/oss-security/2014/06/02/5		mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/67786		vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2014-3940		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1104097		x_refsource_CONFIRMIssue Tracking
https://lkml.org/lkml/2014/3/18/784		mailing-listx_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2014-3940
https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15685.html		x_refsource_CONFIRM
https://www.cve.org/CVERecord?id=CVE-2014-3940