CVE-2014-3153

A local privilege escalation flaw in the Linux kernel's futex_requeue function allowed attackers to escalate privileges without remote access.

The Linux kernel failed to validate that two different futex addresses were provided in the futex_requeue function, enabling local users to escalate privileges. DIB organizations must ensure their Linux systems are patched against this known vulnerability, as it represents a critical failure in kernel hardening and patch management.

Shame score — A fundamental kernel flaw that was actively exploited in the wild for years before being patched, indicating severe negligence in patch management and kernel hardening.