Ubuntu.comUB:CVE-2014-3534CVE-2014-3534
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390
platform does not properly restrict address-space control operations in
PTRACE_POKEUSR_AREA requests, which allows local users to obtain read and
write access to kernel memory locations, and consequently gain privileges,
via a crafted application that makes a ptrace system call.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3534>
- <https://launchpad.net/bugs/1453216>
Notes
| Author | Note |
|---|---|
| jdstrand | android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels |
Related
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%