UBUNTU-CVE-2014-8173

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2014-8173
Published: 16 Mar 2015, 10:59
Last modified:16 Jul 2025, 08:11

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Mar 2015, 10:59
Published
Vulnerability first disclosed
16 Jul 2025, 08:11
Last Modified
Vulnerability information updated

Description

The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock.

Affected Systems

  • ubuntu•linux

    < 3.13.0-1.16

  • ubuntu•linux-lts-utopic

    < 3.16.0-25.33~14.04.2

  • ubuntu•linux-lts-vivid

    < 3.19.0-18.18~14.04.1

References (4)