K15319 : Linux kernel TTY vulnerability CVE-2014-0196

Security Advisory Description

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the “LECHO & !OPOST” case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings. (CVE-2014-0196)

Impact

Local users may be able to cause a denial-of-service (DoS) or gain privileges by triggering a race condition.