{"id":"CVE-2014-0038","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-0038","generatedAt":"2026-11-05T07:17:12.625Z","title":"The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.","description":"The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.","published":"2014-02-06T22:55:03.000Z","lastModified":"2026-06-17T00:02:08.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"2.0","score":6.9,"severity":"MEDIUM","vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C"},"cwe":["CWE-20"],"affected":["linux/linux kernel","opensuse/opensuse"],"epss":{"score":0.35451,"percentile":0.98456,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":4,"verified":true,"firstPublished":"2014-01-31","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":40503,"kind":"exploit","title":"Linux Kernel 3.13.1 - 'Recvmmsg' Local Privilege Escalation (Metasploit)","url":"https://www.exploit-db.com/exploits/40503","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/40503.rb","file":"exploits/linux/local/40503.rb","published":"2016-10-11","added":"2016-10-11","updated":"2016-10-12","author":"Metasploit","type":"local","platform":"linux","port":null,"verified":true,"codes":["CVE-2014-0038"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":31347,"kind":"exploit","title":"Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.04/13.10 x64) - 'CONFIG_X86_X32=y' Local Privilege Escalation (3)","url":"https://www.exploit-db.com/exploits/31347","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux_x86-64/local/31347.c","file":"exploits/linux_x86-64/local/31347.c","published":"2014-02-02","added":"2014-02-02","updated":"2017-05-11","author":"rebel","type":"local","platform":"linux_x86-64","port":null,"verified":true,"codes":["CVE-2014-0038","OSVDB-102749"],"tags":null,"aliases":"recvmmsg;recvmmsg.c","applicationUrl":null,"screenshotUrl":"http://www.exploit-db.com/screenshots/idlt31500/screen-shot-2014-02-02-at-40616-pm.png","referenceUrl":null},{"edbId":31346,"kind":"exploit","title":"Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.10) - 'CONFIG_X86_X32' Arbitrary Write (2)","url":"https://www.exploit-db.com/exploits/31346","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/31346.c","file":"exploits/linux/local/31346.c","published":"2014-02-02","added":"2014-02-02","updated":"2016-09-04","author":"saelo","type":"local","platform":"linux","port":null,"verified":true,"codes":["CVE-2014-0038","OSVDB-102749"],"tags":null,"aliases":"timeoutpwn","applicationUrl":null,"screenshotUrl":"http://www.exploit-db.com/screenshots/idlt31500/screen-shot-2014-02-02-at-42534-pm.png","referenceUrl":null},{"edbId":31305,"kind":"exploit","title":"Linux Kernel 3.4 < 3.13.2 - recvmmsg x32 compat (PoC)","url":"https://www.exploit-db.com/exploits/31305","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/31305.c","file":"exploits/linux/dos/31305.c","published":"2014-01-31","added":"2014-01-31","updated":"2016-12-12","author":"Kees Cook","type":"dos","platform":"linux","port":null,"verified":false,"codes":["CVE-2014-0038","OSVDB-102749"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://code.google.com/p/chromium/issues/detail?id=338594"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 35.5%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2def2ef2ae5f3990aabdbe8a755911902707d268","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://pastebin.com/raw.php?i=DH3Lbg54","tags":["Exploit"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/56669","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://www.exploit-db.com/exploits/31346","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://www.exploit-db.com/exploits/31347","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.2","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:038","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2014/01/31/2","tags":["Mailing List"],"source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/65255","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2094-1","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2095-1","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2096-1","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1060023","tags":["Issue Tracking"],"source":"secalert@redhat.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=338594","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://github.com/saelo/cve-2014-0038","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://github.com/torvalds/linux/commit/2def2ef2ae5f3990aabdbe8a755911902707d268","tags":["Exploit","Patch"],"source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/40503/","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2def2ef2ae5f3990aabdbe8a755911902707d268","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pastebin.com/raw.php?i=DH3Lbg54","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56669","tags":["Not Applicable"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/31346","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/31347","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.2","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:038","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2014/01/31/2","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/65255","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2094-1","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2095-1","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2096-1","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1060023","tags":["Issue Tracking"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=338594","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/saelo/cve-2014-0038","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/2def2ef2ae5f3990aabdbe8a755911902707d268","tags":["Exploit","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40503/","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-0038","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}