VULNERABILITY INTELLIGENCE

CVE-2014-5332

CVSS score6.9 NONE
EPSS probability0.37%
CISA KEVNot currently listed
Published2015-02-06
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAP_IOC_CREATE IOCTL call, which triggers a use-after-free error, as demonstrated by using a race condition to escape the Chrome sandbox.

Weakness classification

  • nvd@nist.gov: CWE-362

Primary references