Vulnerability identifier: #VU42054

Vulnerability risk: High

CVSSv3.1: 8.2 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C]

CVE-ID: CVE-2014-0038

CWE-ID: CWE-20

Exploitation vector: Network

Exploits in database: 6

• August 21, 2020
  • cve-2014-0038 (Linux local root exploit for CVE-2014-0038) [Github]
• August 11, 2020
  • Linux Kernel 3.4 < 3.13.2 - recvmmsg x32 compat (PoC) [Exploit-DB]
  • Linux Kernel 3.13.1 - 'Recvmmsg' Privilege Escalation (Metasploit) [Exploit-DB]
  • Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.04/13.10) - 'CONFIG_X86_X32=y' Privilege Escalation (3) [Exploit-DB]
  • Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.10) - 'CONFIG_X86_X32' Arbitrary Write Exploit (2) [Exploit-DB]
  • Linux Kernel recvmmsg Privilege Escalation [Metasploit]

Impact: Code execution

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation