CVE-2014-0069: linux linux_kernel
Vulnerability summary
CVE-2014-0069 is a high (CVSS 7.2) vulnerability in linux linux_kernel. EPSS estimates a 0.41% chance of exploitation in the next 30 days, higher than 35.7% of scored vulnerabilities.
Not severe (CVSS 7.2, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 13Timeline
- 28-02-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.41%
Chance of exploitation in the next 30 days
Percentile
36%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.41% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Ubuntu10 products
- linux< 3.13.0-13.33 | < 4.2.0-16.19
- linux-aws< 4.4.0-1002.2 | < 4.4.0-1001.10
- linux-gke< 4.4.0-1003.3
- linux-hwe< 4.8.0-36.36~16.04.1
- linux-lts-utopic< 3.16.0-25.33~14.04.2
Redhat6 products
- enterprise_linux_desktop6.0
- enterprise_linux_eus6.5
- enterprise_linux_server6.0
- enterprise_linux_server_aus6.5
- enterprise_linux_server_tus6.5
Suse2 products
- linux_enterprise_desktop11:sp3
- linux_enterprise_server11 | 11:sp3
Debian1 product
- linux< 3.13.6-1
Linux1 product
- linux_kernel< 3.2.57 | ≥ 3.3, < 3.4.83 | ≥ 3.5, < 3.10.33 | ≥ 3.11, < 3.12.14 | ≥ 3.13, < 3.13.6
5 vendors · 20 products
References
22 links- github.com/torvalds/linux/commit/5d81de8e8667da7135d3a32a964087c0faf5483fX Refsource CONFIRMPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
