CVE-2014-0131: linux linux_kernel Use After Free
CVSS: 2.9v2.0LowModified
AliasesUBUNTU-CVE-2014-0131DEBIAN-CVE-2014-0131
Published 24-03-2014Last modified 06-08-2024
Vulnerability summary
CVE-2014-0131 is a low (CVSS 2.9) Use After Free vulnerability in linux linux_kernel. EPSS estimates a 0.68% chance of exploitation in the next 30 days, higher than 51.3% of scored vulnerabilities.
CVSS score
2.9/10
010
Low · v2.0 (NVD)EPSS score
0.68%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 24-03-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Use-after-free vulnerability in the skb_segment function in net/core/skbuff.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation.
CVSS metrics
1 score · 1 source · 1 versionLow 2.9Preferred score · NVD (NIST)
AV:A/AC:M/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
0.68%
Chance of exploitation in the next 30 days
Percentile
51%
Versus all other CVEs
30-day change
0.00 pp
From 0.68% on 19-09-2026
19-09-202619-10-2026
EPSS score0.68%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu10 products
- linux< 3.13.0-21.43 | < 4.2.0-16.19
- linux-aws< 4.4.0-1002.2 | < 4.4.0-1001.10
- linux-gke< 4.4.0-1003.3
- linux-hwe< 4.8.0-36.36~16.04.1
- linux-lts-utopic< 3.16.0-25.33~14.04.2
Debian1 product
- linux< 3.13.6-1
Linux1 product
- linux_kernel≥ 3.0, ≤ 3.13.6
Opensuse1 product
- evergreen11.4
Suse1 product
- linux_enterprise_server11:sp2
5 vendors · 14 products
References
18 links- lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- github.com/torvalds/linux/commit/1fd819ecb90cc9b822cd84d3056ddba315d3340fX Refsource CONFIRMPatchVendor AdvisoryREPORT
- lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- www.spinics.net/lists/netdev/msg274316.htmlMailing ListX Refsource MLISTPatchThird Party AdvisoryREPORT
- www.openwall.com/lists/oss-security/2014/03/10/4Mailing ListX Refsource MLISTThird Party AdvisoryREPORT
- git.kernel.orgX Refsource CONFIRM
- git.kernel.orgREPORT
