Release date:
Updated on:
Affected Systems:
Linux kernel <= 3.14.3
Description:
--------------------------------------------------------------------------------
Bugtraq id: 67302
CVE (CAN) ID: CVE-2014-1738
Linux Kernel is the Kernel of the Linux operating system.
Drivers/block/floppy versions earlier than Linux kernel 3.14.3. in c, the raw_cmd_copyout function does not properly access certain pointers when processing FDRAWCMD ioctl calls. This allows local users to obtain Kernel Heap Memory information by writing/dev/fd devices.
<* Source: Matthew Daley
*>
Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
Http://git.kernel.org /? P = linux/kernel/git/torvalds/linux-2.6.git; a = commit; h = 2145e15e0557a01b9195d1c7199a1b92cb9be81f
Https://bugzilla.redhat.com/show_bug.cgi? Id = 1094299
The Linux kernel replaces iptables with nftables
Linux 3.12 code Suicidal Squirrel
How to install Linux 3.11 Kernel on Ubuntu
The Ubuntu 13.10 (Saucy Salamander) Kernel has been upgraded to Linux Kernel 3.10 RC5
Linux Kernel 3.4.62 LTS is now available for download
How to install Linux kernel 13.10 On Ubuntu 3.12
Linux Kernel: click here
Linux Kernel: click here
This article permanently updates the link address: