ID:10010 - Exploit for Improper privilege management in Linux kernel - CVE-2014-3153

 
Main Vulnerability Database Exploits ID:10010 - Exploit for Improper privilege management in Linux kernel - CVE-2014-3153

ID:10010 - Exploit for Improper privilege management in Linux kernel - CVE-2014-3153

Published: June 20, 2024


Vulnerability identifier: #VU92514
Vulnerability risk: Low
CVE-ID: CVE-2014-3153
CWE-ID: CWE-269
Exploitation vector: Local access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to improper privilege management error within the futex_requeue() and futex_wait_requeue_pi() functions in kernel/futex.c. A local user can execute arbitrary code.


Remediation

Install update from vendor's repository.