CVE-2014-7825

High

Published: 10/11/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The Linux kernel up to version 3.17.2 has an issue with handling private syscall numbers in the perf subsystem, which may allow local users to cause denial of service or bypass the ASLR protection mechanism via a crafted application.

Risk Assessment

The organization may be vulnerable to attacks from local users that could lead to system crashes or security breaches of applications.

Recommendation

It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.

Other vulnerabilities in Linux kernel (versions up to 3.17.2)

CVE-2014-8369High
The kvm_iommu_map_pages function in the Linux kernel through version 3.17.2 miscalculates the number of pages during the handling of a mapping failure, allowing guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges.

Original NVD description (English source)

kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service (out-of-bounds read and OOPS) or bypass the ASLR protection mechanism via a crafted application.