CVE-2014-8159

🗓️ 16 Mar 2015 10:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov👁 172 Views🌐 WEB

InfiniBand (IB) in Linux kernel allows user to access arbitrary memory location

Reporter	Title	Published	Views	Family All 225
bdu_fstec	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec

NVD

Node

linux linux_kernelRange2.6.12–3.2.69

linux linux_kernelRange3.3–3.4.108

linux linux_kernelRange3.5–3.10.75

linux linux_kernelRange3.11–3.12.41

linux linux_kernelRange3.13–3.14.39

linux linux_kernelRange3.15–3.16.35

linux linux_kernelRange3.17–3.18.13

linux linux_kernelRange3.19–3.19.5

Node

canonical ubuntu_linuxMatch10.04-

canonical ubuntu_linuxMatch12.04-

canonical ubuntu_linuxMatch14.04esm

canonical ubuntu_linuxMatch14.10

Node

debian debian_linuxMatch7.0

debian debian_linuxMatch8.0

Source	Link
rhn	www.rhn.redhat.com/errata/RHSA-2015-0783.html
ubuntu	www.ubuntu.com/usn/USN-2561-1
lists	www.lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html
kb	www.kb.juniper.net/InfoCenter/index
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-March/152747.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
ubuntu	www.ubuntu.com/usn/USN-2529-1
rhn	www.rhn.redhat.com/errata/RHSA-2015-0726.html
lists	www.lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html
ubuntu	www.ubuntu.com/usn/USN-2526-1

Parameter	Position	Path	Description	CWE
permissions on uverbs device	path	/dev/infiniband/uverbs	Linux kernel InfiniBand userVerbs memory registration vulnerability allowing local access to arbitrary physical memory via /dev/infiniband/uverbs	CWE-264

17 Jun 2026 00:16Current

6Medium risk

Vulners AI Score6

CVSS 26.9

EPSS0.00441

CWE-264