https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:37:28 +0000 https://cve.radiocsirt.org/vuln/cve-2014-3940 <p>The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numa_maps read operations during hugepage migration, related to fs/proc/task_mmu.c and mm/mempolicy.c.</p> <p>The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numa_maps read operations during hugepage migration, related to fs/proc/task_mmu.c and mm/mempolicy.c.</p> https://cve.radiocsirt.org/vuln/cve-2014-3940 https://cve.radiocsirt.org/vuln/usn-2290-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Sasha Levin reported a flaw in the Linux kernel&#39;s point-to-point protocol (PPP) when used with the Layer Two Tunneling Protocol (L2TP). A local user could exploit this flaw to gain administrative privileges. (CVE-2014-4943)</p> <p>Salva Peiró discovered an information leak in the Linux kernel&#39;s media- device driver. A local attacker could exploit this flaw to obtain sensitive information from kernel memory. (CVE-2014-1739)</p> <p>A bounds check error was discovered in the socket filter subsystem of the Linux kernel. A local user could exploit this flaw to cause a denial of service (system crash) via crafted BPF instructions. (CVE-2014-3144)</p> <p>A remainder calculation error was discovered in the socket filter subsystem of the Linux kernel. A local user could exploit this flaw to cause a denial of service (system crash) via crafted BPF instructions. (CVE-2014-3145)</p> <p>A flaw was discovered in the Linux kernel&#39;s handling of hugetlb entries. A local user could exploit this flaw to cause a denial service (memory corruption or system crash). (CVE-2014-3940)</p> <p>Don Bailey and Ludvig Strigeus discovered an integer overflow in the Linux kernel&#39;s implementation of the LZ4 decompression algorithm, when used by code not complying with API limitations. An attacker could exploit this flaw to cause a denial of service (memory corruption) or possibly other unspecified impact. (CVE-2014-4611)</p> <p>Tuomas Räsänen reported the Linux kernel on certain Intel processors does not properly initialize random seeds for ne…</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Sasha Levin reported a flaw in the Linux kernel&#39;s point-to-point protocol (PPP) when used with the Layer Two Tunneling Protocol (L2TP). A local user could exploit this flaw to gain administrative privileges. (CVE-2014-4943)</p> <p>Salva Peiró discovered an information leak in the Linux kernel&#39;s media- device driver. A local attacker could exploit this flaw to obtain sensitive information from kernel memory. (CVE-2014-1739)</p> <p>A bounds check error was discovered in the socket filter subsystem of the Linux kernel. A local user could exploit this flaw to cause a denial of service (system crash) via crafted BPF instructions. (CVE-2014-3144)</p> <p>A remainder calculation error was discovered in the socket filter subsystem of the Linux kernel. A local user could exploit this flaw to cause a denial of service (system crash) via crafted BPF instructions. (CVE-2014-3145)</p> <p>A flaw was discovered in the Linux kernel&#39;s handling of hugetlb entries. A local user could exploit this flaw to cause a denial service (memory corruption or system crash). (CVE-2014-3940)</p> <p>Don Bailey and Ludvig Strigeus discovered an integer overflow in the Linux kernel&#39;s implementation of the LZ4 decompression algorithm, when used by code not complying with API limitations. An attacker could exploit this flaw to cause a denial of service (memory corruption) or possibly other unspecified impact. (CVE-2014-4611)</p> <p>Tuomas Räsänen reported the Linux kernel on certain Intel processors does not properly initialize random seeds for ne…</p> https://cve.radiocsirt.org/vuln/usn-2290-1