Linux Kernel up to 3.13.1 Low-Address Protection input validation
| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 3.5 | $0-$5k | 0.00 |
Summary
A vulnerability identified as problematic has been detected in Linux Kernel up to 3.13.1. Impacted is an unknown function of the component Low-Address Protection Handler. The manipulation leads to input validation. This vulnerability is listed as CVE-2014-2039. There is no available exploit. Applying a patch is the recommended action to fix this issue.
Details
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 3.13.1 (Operating System). This issue affects some unknown functionality of the component Low-Address Protection Handler. The manipulation with an unknown input leads to a input validation vulnerability. Using CWE to declare the problem leads to CWE-20. The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process the data safely and
correctly. Impacted is availability. The summary by CVE is:
arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local users to cause a denial of service (system crash) by executing a crafted instruction.
The issue has been introduced in 12/18/2003. The weakness was presented 02/21/2014 by Martin Schwidefsky with IBM as s390: fix kernel crash due to linkage stack instructions as confirmed git commit (GIT Repository). The advisory is shared at git.kernel.org. The public release was coordinated in cooperation with Linux. The identification of this vulnerability is CVE-2014-2039 since 02/19/2014. The exploitation is known to be easy. An attack has to be approached locally. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available.
The vulnerability was handled as a non-public zero-day exploit for at least 3718 days. During that time the estimated underground price was around $5k-$25k. The vulnerability scanner Nessus provides a plugin with the ID 72754 (Fedora 20 : kernel-3.13.5-200.fc20 (2014-3094)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Fedora Local Security Checks. The commercial vulnerability scanner Qualys is able to test this issue with plugin 122149 (CentOS Security Update for Kernel (CESA-2014:0771)).
Applying the patch s390: fix kernel crash due to linkage stack instructions is able to eliminate this problem. The bugfix is ready for download at git.kernel.org.
The vulnerability is also documented in the databases at X-Force (91308), Tenable (72754), SecurityFocus (BID 65700†), Secunia (SA56963†) and Vulnerability Center (SBV-43586†). See VDB-12412 and VDB-12411 for similar entries. If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Product
Type
Vendor
Name
Version
License
Website
- Vendor: https://www.kernel.org/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 4.0VulDB Meta Temp Score: 3.5
VulDB Base Score: 4.0
VulDB Temp Score: 3.5
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Input validationCWE: CWE-20
CAPEC: 🔍
ATT&CK: 🔍
Physical: Partially
Local: Yes
Remote: No
Availability: 🔍
Status: Unproven
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | Unlock | Unlock | Unlock | Unlock |
|---|---|---|---|---|
| Today | Unlock | Unlock | Unlock | Unlock |
Nessus ID: 72754
Nessus Name: Fedora 20 : kernel-3.13.5-200.fc20 (2014-3094)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Port: 🔍
OpenVAS ID: 867546
OpenVAS Name: Fedora Update for kernel FEDORA-2014-2887
OpenVAS File: 🔍
OpenVAS Family: 🔍
Qualys ID: 🔍
Qualys Name: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: PatchStatus: 🔍
0-Day Time: 🔍
Patch: s390: fix kernel crash due to linkage stack instructions
Timeline
12/18/2003 🔍02/19/2014 🔍
02/20/2014 🔍
02/20/2014 🔍
02/21/2014 🔍
02/26/2014 🔍
02/28/2014 🔍
03/02/2014 🔍
03/12/2014 🔍
04/12/2025 🔍
Sources
Vendor: kernel.orgAdvisory: s390: fix kernel crash due to linkage stack instructions
Researcher: Martin Schwidefsky
Organization: IBM
Status: Confirmed
Confirmation: 🔍
Coordinated: 🔍
CVE: CVE-2014-2039 (🔍)
GCVE (CVE): GCVE-0-2014-2039
GCVE (VulDB): GCVE-100-12413
OVAL: 🔍
X-Force: 91308 - Linux Kernel linkage stack instructions denial of service, Medium Risk
SecurityFocus: 65700 - Linux Kernel CVE-2014-2039 Local Denial of Service Vulnerability
Secunia: 56963 - Linux Kernel Linkage Stack Instructions Handling Denial of Service Vulnerability, Not Critical
Vulnerability Center: 43586 - Linux Kernel before 3.13.5 Local DoS via Improper Handling Attempted Use of the Linkage Stack, Medium
See also: 🔍
Entry
Created: 02/26/2014 13:49Updated: 04/12/2025 20:13
Changes: 02/26/2014 13:49 (88), 05/22/2017 11:53 (4), 06/09/2021 20:55 (3), 04/12/2025 20:13 (15)
Complete: 🔍
Committer:
Cache ID: 216:561:103
No comments yet. Languages: en.
Please log in to comment.