Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 510130 (CVE-2014-1737) - Kernel: floppy ioctl kernel code execution (CVE-2014-1737)
Summary: Kernel: floppy ioctl kernel code execution (CVE-2014-1737)
Status: CONFIRMED
Alias: CVE-2014-1737
Product: Gentoo Security
Classification: Unclassified
Component: Kernel (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Kernel Security
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-05-12 07:34 UTC by Agostino Sarubbo
Modified: 2016-12-07 04:27 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2014-05-12 07:34:17 UTC
CVE-2014-1737 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1737):
  The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel 
  through 3.14.3 does not properly handle error conditions during processing 
  of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations 
  and gain privileges by leveraging write access to a /dev/fd device.
Comment 1 GLSAMaker/CVETool Bot gentoo-dev 2014-08-10 22:00:26 UTC
CVE-2014-1737 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1737):
  The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel
  through 3.14.3 does not properly handle error conditions during processing
  of an FDRAWCMD ioctl call, which allows local users to trigger kfree
  operations and gain privileges by leveraging write access to a /dev/fd
  device.