CVE-2014-1737 in Linux Kernel

Сводка (Английский)

The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.

Резервировать

29.01.2014

Раскрытие

11.05.2014

Записи

VulDB provides additional information and datapoints for this CVE:

ИД	Уязвимость	CWE	Экс	Кон	CVE
13190	Linux Kernel Floppy Device floppy.c raw_cmd_copyin эскалация привилегий	264	недоказанный	Официальное исправление	CVE-2014-1737