CVE-2014-0203: linux linux_kernel Use After Free

Modified

AliasesUBUNTU-CVE-2014-0203DEBIAN-CVE-2014-0203

Published 23-06-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-0203 is a medium (CVSS 5.5) Use After Free vulnerability in linux linux_kernel. EPSS estimates a 0.54% chance of exploitation in the next 30 days, higher than 45.3% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

5.5/10

010

Medium · v3.1 (NVD)

EPSS score

0.54%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 2

DLA-0015-1 RHSA-2014:0771

Timeline

23-06-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service (incorrect free operations and system crash) via an open system call.

CVSS metrics

4 scores · 3 sources · 2 versions

v3.15.5v2.04.9

EPSS trend

Probability

0.54%

Chance of exploitation in the next 30 days

Percentile

45%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.54% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (bugzilla.redhat.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu14 products

linux< 3.11.0-12.19 | < 4.2.0-16.19
linux-aws< 4.4.0-1002.2 | < 4.4.0-1001.10
linux-flo< 3.4.0-1.3 | < 3.4.0-5.22
linux-gke< 4.4.0-1003.3
linux-goldfish< 3.4.0-1.9 | < 3.4.0-4.27

Show all 14

Debian1 product

linux< 2.6.33-1

Linux1 product

linux_kernel< 2.6.33

Oracle1 product

linuxEOL5 | 6

4 vendors · 17 products

References

17 links

secunia.com/advisories/59262Third Party AdvisoryX Refsource SECUNIABroken Link
www.securityfocus.com/bid/68125VDB EntryX Refsource BIDThird Party Advisory
git.kernel.orgX Refsource CONFIRM
secunia.com/advisories/59309Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/59406Third Party AdvisoryX Refsource SECUNIABroken Link
mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33X Refsource CONFIRMBroken Link
linux.oracle.com/errata/ELSA-2014-0771.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59560Third Party AdvisoryX Refsource SECUNIABroken Link
linux.oracle.com/errata/ELSA-2014-3043.htmlX Refsource CONFIRMThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=1094363X Refsource CONFIRMExploitIssue TrackingPatchThird Party Advisory

Show all 17 references

github.com/torvalds/linux/commit/86acdca1b63e6890540fa19495cfc708beff3d8bX Refsource CONFIRMPatchThird Party Advisory
ubuntu.com/security/CVE-2014-0203REPORT
rhn.redhat.com/errata/RHSA-2014-0771.htmlREPORT
ubuntu.com/security/notices/USN-2332-1Advisory
ubuntu.com/security/notices/USN-2333-1Advisory
www.cve.org/CVERecord?id=CVE-2014-0203REPORT
security-tracker.debian.org/tracker/CVE-2014-0203Advisory