VULNERABILITY INTELLIGENCE

CVE-2014-0196

CVSS score5.5 MEDIUM
EPSS probability20.33%
CISA KEVKnown exploited vulnerability
Published2014-05-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Known Exploited Vulnerability

Linux Kernel Race Condition Vulnerability

Vendor / product: Linux / Kernel

Description

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references