Exposures › CVE-2014-3153

CVE-2014-3153

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-05-25

Reference

https://nvd.nist.gov/vuln/detail/CVE-2014-3153

⌖ exploited in the wild shame 50/100 exploited-in-wild

The futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.

Players implicated

linux · vendor Kernel · product

Description

The futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.