VULNERABILITY INTELLIGENCE

CVE-2014-1738

CVSS score2.1 LOW
EPSS probability0.51%
CISA KEVNot currently listed
Published2014-05-11
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references