CVE-2014-1737 in Kernel
Summary
The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/29/2014
Disclosure
05/11/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13190 | Linux Kernel Floppy Device floppy.c raw_cmd_copyin access control | 264 | Unproven | Official fix | CVE-2014-1737 |