Lucene search
Ubuntu.comUB:CVE-2014-3153HistoryJun 05, 2014 - 12:00 a.m.
CVE-2014-3153
2014-06-0500:00:00
ubuntu.com
ubuntu.com
22
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
47.0%
The futex_requeue function in kernel/futex.c in the Linux kernel through
3.14.5 does not ensure that calls have two different futex addresses, which
allows local users to gain privileges via a crafted FUTEX_REQUEUE command
that facilitates unsafe waiter modification.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | linux | < 2.6.32-61.124 | UNKNOWN |
| ubuntu | 12.04 | noarch | linux | < 3.2.0-64.97 | UNKNOWN |
| ubuntu | 13.10 | noarch | linux | < 3.11.0-23.40 | UNKNOWN |
| ubuntu | 14.04 | noarch | linux | < 3.13.0-29.53 | UNKNOWN |
| ubuntu | 12.04 | noarch | linux-armadaxp | < 3.2.0-1634.49 | UNKNOWN |
| ubuntu | 10.04 | noarch | linux-ec2 | < 2.6.32-365.79 | UNKNOWN |
| ubuntu | 12.04 | noarch | linux-lts-quantal | < 3.5.0-51.77~precise1 | UNKNOWN |
| ubuntu | 12.04 | noarch | linux-lts-raring | < 3.8.0-42.62~precise1 | UNKNOWN |
| ubuntu | 12.04 | noarch | linux-lts-saucy | < 3.11.0-23.40~precise1 | UNKNOWN |
| ubuntu | 12.04 | noarch | linux-lts-trusty | < 3.13.0-29.53~precise1 | UNKNOWN |
References
launchpad.net/bugs/cve/CVE-2014-3153
nvd.nist.gov/vuln/detail/CVE-2014-3153
security-tracker.debian.org/tracker/CVE-2014-3153
ubuntu.com/security/notices/USN-2233-1
ubuntu.com/security/notices/USN-2234-1
ubuntu.com/security/notices/USN-2235-1
ubuntu.com/security/notices/USN-2236-1
ubuntu.com/security/notices/USN-2237-1
ubuntu.com/security/notices/USN-2238-1
ubuntu.com/security/notices/USN-2239-1
ubuntu.com/security/notices/USN-2240-1
ubuntu.com/security/notices/USN-2241-1
ubuntu.com/security/notices/USN-2260-1
www.cve.org/CVERecord?id=CVE-2014-3153
Related
threatpost
threatpost
Android Root Access Vulnerability Affecting Most Devices
2014-06-17 10:47:45
Google Play Hit With Rash of Auto-Rooting Malware
2016-06-28 12:29:57
Android Ransomware Attacks Using Towelroot, Hacking Team Exploits
2016-04-25 15:36:33
canvas
canvas
Immunity Canvas: LINUX_FUTEX_REQUEUE
2014-06-07 14:55:00
securityvulns
securityvulns
[oss-security] Linux kernel futex local privilege escalation (CVE-2014-3153)
2014-06-09 00:00:00
Linux privilege escalation
2014-06-09 00:00:00
packetstorm
packetstorm
Android Futex Requeue Kernel Exploit
2015-02-09 00:00:00
nessus
nessus
Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3038)
2014-06-09 00:00:00
Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2014-3037)
2014-06-09 00:00:00
Amazon Linux AMI : kernel (ALAS-2014-363)
2014-10-12 00:00:00
ubuntu
ubuntu
Linux kernel (Quantal HWE) vulnerability
2014-06-05 00:00:00
Linux kernel (Raring HWE) vulnerabilities
2014-06-05 00:00:00
Linux kernel vulnerabilities
2014-06-05 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2014-3039)
2015-10-06 00:00:00
SUSE: Security Advisory for Linux (SUSE-SU-2014:0837-2)
2015-10-15 00:00:00
SUSE: Security Advisory for Linux (SUSE-SU-2014:0837-1)
2015-10-16 00:00:00
saint
saint
Linux kernel futex_requeue privilege elevation
2014-12-03 00:00:00
Linux kernel futex_requeue privilege elevation
2014-12-03 00:00:00
Linux kernel futex_requeue privilege elevation
2014-12-03 00:00:00
cloudfoundry
cloudfoundry
CVE-2014-3153 Futex requeue exploit | Cloud Foundry
2014-08-18 00:00:00
zdt
zdt
Linux Kernel libfutex Local Root for RHEL/CentOS 7.0.1406 Exploit
2014-11-26 00:00:00
Android Futex Requeue Kernel Exploit
2015-02-10 00:00:00
attackerkb
attackerkb
CVE-2014-3153
2014-06-07 00:00:00
android
android
TowelRoot
2014-06-05 00:00:00
cve
cve
CVE-2014-3153
2014-06-07 14:55:00
altlinux
altlinux
prion
prion
Command injection
2014-06-07 14:55:00
debiancve
debiancve
CVE-2014-3153
2014-06-07 14:55:00
amazon
amazon
Medium: kernel
2014-06-15 16:30:00
Medium: kernel
2014-08-21 11:03:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2014-06-06 00:00:00
Unbreakable Enterprise kernel security update
2014-06-07 00:00:00
unbreakable enterprise kernel security update
2014-06-07 00:00:00
hackerone
hackerone
Sandbox Escape: Linux PI futex self-requeue bug
2014-05-26 05:00:49
suse
suse
kernel update fixes local privilege escalation and a regression causing a crash if IPsec peer is unavailable (important)
2014-07-08 20:04:15
Security update for Linux Kernel (important)
2014-06-25 00:04:51
Security update for Linux Kernel (critical)
2014-06-11 05:04:34
thn
thn
Towelroot : One-Click Android Rooting Tool Released By Geohot
2014-06-17 22:49:00
Over 1 Million Google Accounts Hacked by 'Gooligan' Android Malware
2016-11-30 05:44:00
CopyCat Android Rooting Malware Infected 14 Million Devices
2017-07-06 05:17:00
cisa_kev
cisa_kev
Linux Kernel Privilege Escalation Vulnerability
2022-05-25 00:00:00
exploitpack
exploitpack
Linux Kernel 3.14.5 (CentOS 7 RHEL) - libfutex Local Privilege Escalation
2014-11-25 00:00:00
metasploit
metasploit
Android 'Towelroot' Futex Requeue Kernel Exploit
2014-12-01 03:49:22
exploitdb
exploitdb
osv
osv
linux-2.6 - security update
2014-06-18 00:00:00
linux - security update
2014-06-05 00:00:00
openssl - security update
2014-06-05 00:00:00
chrome
chrome
Stable Channel Update for Chrome OS
2014-06-10 00:00:00
debian
debian
[SECURITY] [DSA 2949-1] linux security update
2014-06-05 12:15:58
[SECURITY] [DSA 2949-1] linux security update
2014-06-05 12:15:58
[SECURITY] [DSA 2950-1] openssl security update
2014-06-05 11:51:34
redhat
redhat
(RHSA-2014:0900) Important: kernel security and bug fix update
2014-07-17 00:00:00
(RHSA-2014:0800) Important: kernel security update
2014-06-26 00:00:00
(RHSA-2014:0771) Important: kernel security and bug fix update
2014-06-19 00:00:00
mageia
mageia
Updated kernel packages fixes security vulnerabilities.
2014-06-19 00:50:01
Updated kernel packages fixes security vulnerabilities
2014-06-23 01:13:23
Updated kernel-tmb package fixes security vulnerabilities
2014-08-18 13:14:56
securelist
securelist
Skygofree: Following in the footsteps of HackingTeam
2018-01-16 10:00:58
centos
centos
kernel, perf, python security update
2014-06-20 10:10:41
veracode
veracode
Information Disclosure
2019-05-02 05:03:36
Information Disclosure
2019-05-02 05:03:36
Privilege Escalation
2019-05-02 05:03:36
kitploit
kitploit
fedora
fedora
[SECURITY] Fedora 20 Update: kernel-3.14.6-200.fc20
2014-06-11 16:31:10
[SECURITY] Fedora 20 Update: kernel-3.14.8-200.fc20
2014-06-18 22:25:48
[SECURITY] Fedora 20 Update: kernel-3.15.4-200.fc20
2014-07-11 02:02:48
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
47.0%
Related for UB:CVE-2014-3153