CVE-2014-0196
Linux Kernel Race Condition Vulnerability
Does this matter?
Known to be exploited in the wild (CISA KEV, CISA remediation deadline 2 June 2023). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.
Description
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 20.33% probability · 97th percentile
- Public exploits
- 1 in Exploit-DB · first 26 May 2014
- CISA KEV
- Listed 12 May 2023 · due 2 June 2023
- Weakness
- CWE-362
- Affected
- linux/linux kernel · debian/debian linux · redhat/enterprise linux · redhat/enterprise linux eus · redhat/enterprise linux server eus · suse/suse linux enterprise desktop · suse/suse linux enterprise high availability extension · suse/suse linux enterprise server · oracle/linux · canonical/ubuntu linux · f5/big-ip access policy manager · f5/big-ip advanced firewall manager · f5/big-ip analytics · f5/big-ip application acceleration manager · f5/big-ip application security manager · f5/big-ip edge gateway · f5/big-ip global traffic manager · f5/big-ip link controller · f5/big-ip local traffic manager · f5/big-ip policy enforcement manager · +10 more
- Source
- secalert@redhat.com
EPSS moved from 20.3% on 19 October 2026 to 20.3% on 26 October 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.
CISA notes
The impacted product is end-of-life and should be disconnected if still in use. https://lkml.iu.edu/hypermail/linux/kernel/1609.1/02103.html; https://nvd.nist.gov/vuln/detail/CVE-2014-0196
Public exploits (1)
Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.
References
- http://bugzilla.novell.com/show_bug.cgi?id=875690Issue Tracking, Permissions Required, Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00Broken Link
- http://linux.oracle.com/errata/ELSA-2014-0771.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.htmlMailing List, Third Party Advisory
- http://pastebin.com/raw.php?i=yTSFUBgZExploit, Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0512.htmlThird Party Advisory
- http://secunia.com/advisories/59218Not Applicable
- http://secunia.com/advisories/59262Broken Link
- http://secunia.com/advisories/59599Broken Link
- http://source.android.com/security/bulletin/2016-07-01.htmlNot Applicable
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.htmlThird Party Advisory
- http://www.debian.org/security/2014/dsa-2926Third Party Advisory
- http://www.debian.org/security/2014/dsa-2928Third Party Advisory
- http://www.exploit-db.com/exploits/33516Exploit, Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2014/05/05/6Mailing List, Third Party Advisory
- http://www.osvdb.org/106646Broken Link
- http://www.ubuntu.com/usn/USN-2196-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2197-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2198-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2199-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2200-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2201-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2202-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2203-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2204-1Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1094232Issue Tracking, Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00Exploit, Patch, Third Party Advisory
- http://bugzilla.novell.com/show_bug.cgi?id=875690Issue Tracking, Permissions Required, Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00Broken Link
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.