CVE-2014-0181: linux linux_kernel
Vulnerability summary
CVE-2014-0181 is a low (CVSS 2.1) vulnerability in linux linux_kernel. EPSS estimates a 0.53% chance of exploitation in the next 30 days, higher than 45.1% of scored vulnerabilities.
Not severe (CVSS 2.1, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 8 · Related 1Timeline
- 27-04-2014PublishedVulnerability first disclosed.
- 13-02-2025Last modifiedVulnerability information updated.
Description
The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local users to bypass intended access restrictions and modify network configurations by using a Netlink socket for the (1) stdout or (2) stderr of a setuid program.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.53%
Chance of exploitation in the next 30 days
Percentile
45%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.54% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat20 products
- enterprise_linux_desktop5
- enterprise_linux_server5.0
- kernel< 0:2.6.18-400.el5
- kernel-debug< 0:2.6.18-400.el5
- kernel-debug-debuginfo< 0:2.6.18-400.el5
Ubuntu18 products
- linux< 3.13.0-35.62
- linux-azureAll versions (No fix recorded)
- linux-azure-6.11All versions (No fix recorded)
- linux-azure-fdeAll versions (No fix recorded)
- linux-azure-fde-5.15All versions (No fix recorded)
Suse3 products
- linux_enterprise_real_time_extension11:sp3
- linux_enterprise_server10:sp4 | 11:sp1
- suse_linux_enterprise_server11
Debian1 product
- linux< 3.14.9-1
Linux1 product
- linux_kernel≤ 3.14.1
Opensuse1 product
- evergreen11.4
6 vendors · 44 products
References
27 links- www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.45X Refsource CONFIRMRelease NotesVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.9X Refsource CONFIRMRelease NotesVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
Show all 27 references
- lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
