UBUNTU-CVE-2014-2672
Advisory lineage Upstream: 1 Downstream: 0
Upstream
Published: 01 Apr 2014, 00:00
Last modified:04 Feb 2026, 04:15
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
01 Apr 2014, 00:00
Published
Vulnerability first disclosed
04 Feb 2026, 04:15
Last Modified
Vulnerability information updated
Description
Race condition in the ath_tx_aggr_sleep function in drivers/net/wireless/ath/ath9k/xmit.c in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via a large amount of network traffic that triggers certain list deletions.
Affected Systems
- ubuntu•linux
< 3.13.0-20.42 | < 4.2.0-16.19
- ubuntu•linux-aws
< 4.4.0-1002.2 | < 4.4.0-1001.10
- ubuntu•linux-gke
< 4.4.0-1003.3
- ubuntu•linux-hwe
< 4.8.0-36.36~16.04.1
- ubuntu•linux-lts-utopic
< 3.16.0-25.33~14.04.2
- ubuntu•linux-lts-vivid
< 3.19.0-18.18~14.04.1
- ubuntu•linux-lts-wily
< 4.2.0-18.22~14.04.1
- ubuntu•linux-lts-xenial
< 4.4.0-13.29~14.04.1
- ubuntu•linux-raspi2
< 4.2.0-1013.19
- ubuntu•linux-snapdragon
< 4.4.0-1012.12
References (9)
- https://ubuntu.com/security/CVE-2014-2672
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=21f8aaee0c62708654988ce092838aa7df4d25d8
- https://ubuntu.com/security/notices/USN-2221-1
- https://ubuntu.com/security/notices/USN-2223-1
- https://ubuntu.com/security/notices/USN-2224-1
- https://ubuntu.com/security/notices/USN-2225-1
- https://ubuntu.com/security/notices/USN-2227-1
- https://ubuntu.com/security/notices/USN-2228-1
- https://www.cve.org/CVERecord?id=CVE-2014-2672