VULNERABILITY INTELLIGENCE
CVE-2014-4157
CVSS score4.6 MEDIUM
EPSS probability0.51%
CISA KEVNot currently listed
Published2014-06-23
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Description
arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECCOMP checks on the fast system-call path, which allows local users to bypass intended PR_SET_SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem.
Primary references
- security@debian.org
- security@debian.org — Mailing List, Third Party Advisory
- security@debian.org — Vendor Advisory
- security@debian.org — Mailing List, Third Party Advisory
- security@debian.org — Issue Tracking, Mailing List, Third Party Advisory
- security@debian.org — Exploit, Patch
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch