VULNERABILITY INTELLIGENCE

CVE-2014-0038

CVSS score6.9 MEDIUM
EPSS probability35.45%
CISA KEVNot currently listed
Published2014-02-06
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references