CVE-2014-3153: Linux Kernel Privilege Escalation Vulnerability

KEV

Analyzed

AliasesUBUNTU-CVE-2014-3153DEBIAN-CVE-2014-3153

Published 07-06-2014Last modified 22-10-2025

Vulnerability summary

CVE-2014-3153 is a high (CVSS 7.8) vulnerability in Linux Kernel. It is known to be exploited: CISA lists it, first on 25-05-2022. EPSS estimates a 37.23% chance of exploitation in the next 30 days, higher than 98.5% of scored vulnerabilities. 4 public exploits are recorded.

Priority

Act nowlisted as exploited

Listed as exploited by CISA (25-05-2022)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v3.1 (CVE.org)

EPSS score

37.23%

0%100%

High · 0.00 pp in 30 days

KEVExploited in the wildCritical · listed in 1 catalog

RansomwareNot flaggedNo ransomware use recorded.

Public exploits4reference, exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 16 · Related 1

DLA-0007-1 DSA-2949-1 MGASA-2014-0265 MGASA-2014-0273 MGASA-2014-0330 MGASA-2014-0331+10 more

Timeline

07-06-2014
PublishedVulnerability first disclosed.
25-05-2022
Added to CISA KEVExploitedLinux Kernel Privilege Escalation Vulnerability
15-06-2022
CISA remediation dueDeadline passedApply updates per vendor instructions.
22-10-2025
Last modifiedVulnerability information updated.

Description

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

CVSS metrics

5 scores · 4 sources · 2 versions

v3.17.8v2.07.2

EPSS trend

Probability

37.23%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

No change 0.00 pp

From 37.23% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 25-05-2022
Federal due date: 15-06-2022

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

CISA required action

Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2014-3153

Public exploits

4 found

referenceUnverified
Exploit Reference (debian.org)
Maturity: unknown
referenceUnverified
Exploit Reference (elongl.github.io)
Maturity: unknown
exploit-databaselocallinuxUnverified
Linux Kernel 3.14.5 (CentOS 7 / RHEL) - 'libfutex' Local Privilege Escalation
Maturity: poc

Show all 4 exploits

MetasploitremoteVerified
Android 'Towelroot' Futex Requeue Kernel Exploit
exploit/android/local/futex_requeue
Maturity: weaponized

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Suse4 products

linux_enterprise_desktop11:sp3
linux_enterprise_high_availability_extension11:sp3
linux_enterprise_real_time_extension11:sp3
linux_enterprise_server11 | 11:sp2 | 11:sp3

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04

Debian1 product

linux< 3.14.5-1

Linux1 product

linux_kernel< 3.2.60 | ≥ 3.3, < 3.4.92 | ≥ 3.5, < 3.10.42 | ≥ 3.11, < 3.12.22 | ≥ 3.13, < 3.14.6

Opensuse1 product

opensuseEOL11.4

Oracle1 product

linuxEOL5 | 6

Redhat1 product

enterprise_linux_server_aus6.2

Ubuntu1 product

linux< 3.13.0-29.53

8 vendors · 11 products

References

54 links

www.securityfocus.com/bid/67906VDB EntryX Refsource BIDBroken LinkThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
openwall.com/lists/oss-security/2014/06/05/24Mailing ListX Refsource MLIST
secunia.com/advisories/59029Third Party AdvisoryX Refsource SECUNIABroken Link
www.debian.org/security/2014/dsa-2949Vendor AdvisoryX Refsource DEBIANExploit
lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/59262Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/58990Third Party AdvisoryX Refsource SECUNIABroken Link
git.kernel.org/cgit/…X Refsource CONFIRMMailing ListPatch

Show all 54 references

git.kernel.org/cgit/…X Refsource CONFIRMMailing ListPatch
git.kernel.orgX Refsource CONFIRMBroken Link
linux.oracle.com/errata/ELSA-2014-3037.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59153Third Party AdvisoryX Refsource SECUNIABroken Link
openwall.com/lists/oss-security/2014/06/06/20Mailing ListX Refsource MLIST
secunia.com/advisories/59309Third Party AdvisoryX Refsource SECUNIABroken Link
github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8X Refsource CONFIRMPatch
www.securitytracker.com/id/1030451VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
linux.oracle.com/errata/ELSA-2014-0771.htmlX Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2014-0800.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.ubuntu.com/usn/USN-2237-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
linux.oracle.com/errata/ELSA-2014-3039.htmlX Refsource CONFIRMThird Party Advisory
git.kernel.org/cgit/…X Refsource CONFIRMMailing ListPatch
secunia.com/advisories/58500Third Party AdvisoryX Refsource SECUNIABroken Link
www.ubuntu.com/usn/USN-2240-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=1103626X Refsource CONFIRMIssue TrackingThird Party Advisory
secunia.com/advisories/59386Third Party AdvisoryX Refsource SECUNIABroken Link
www.exploit-db.com/exploits/35370ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
secunia.com/advisories/59599Third Party AdvisoryX Refsource SECUNIABroken Link
lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2014/06/05/22Mailing ListX Refsource MLIST
secunia.com/advisories/59092Third Party AdvisoryX Refsource SECUNIABroken Link
linux.oracle.com/errata/ELSA-2014-3038.htmlX Refsource CONFIRMThird Party Advisory
www.openwall.com/lists/oss-security/2021/02/01/4Mailing ListX Refsource MLIST
www.openwall.com/lists/oss-security/2021/02/01/4X Refsource MISCMailing List
elongl.github.io/exploitation/2021/01/08/cve-2014-3153.htmlX Refsource MISCExploit
github.com/elongl/CVE-2014-3153X Refsource MISCThird Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-3153Government ResourceUS Government Resource
ubuntu.com/security/CVE-2014-3153REPORT
ubuntu.com/security/notices/USN-2233-1Advisory
ubuntu.com/security/notices/USN-2234-1Advisory
ubuntu.com/security/notices/USN-2235-1Advisory
ubuntu.com/security/notices/USN-2236-1Advisory
ubuntu.com/security/notices/USN-2237-1Advisory
ubuntu.com/security/notices/USN-2238-1Advisory
ubuntu.com/security/notices/USN-2239-1Advisory
ubuntu.com/security/notices/USN-2240-1Advisory
ubuntu.com/security/notices/USN-2241-1Advisory
ubuntu.com/security/notices/USN-2260-1Advisory
www.cve.org/CVERecord?id=CVE-2014-3153REPORT
www.cisa.gov/known-exploited-vulnerabilities-catalogREPORT
security-tracker.debian.org/tracker/CVE-2014-3153Advisory