VULNERABILITY INTELLIGENCE
CVE-2014-4027
CVSS score2.3 LOW
EPSS probability0.65%
CISA KEVNot currently listed
Published2014-06-23
Last modified2026-06-17
CVSS vectorAV:A/AC:M/Au:S/C:P/I:N/A:N
Description
The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Primary references
- cve@mitre.org
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Mailing List, Patch, Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Issue Tracking, Patch, Third Party Advisory