CVE-2014-1738 in Kernel
Summary
The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
01/29/2014
Disclosure
05/11/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13189 | Linux Kernel Floppy Device floppy.c raw_cmd_copyout access control | 264 | Unproven | Official fix | CVE-2014-1738 |