8 Linux Kernel CVEs in May 2014
Full month · Source: NIST NVD
In May 2014, 8 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 1 was rated High severity and 6 Medium. CVE-2014-0196 was confirmed as actively exploited in the wild and added to the CISA Known Exploited Vulnerabilities catalog. May's 8 CVEs represent 6% of all 2014 Linux kernel CVEs , down from April's 11 (a 27% month-over-month decrease) .
Actively Exploited CVEs — May 2014
1 CVE in CISA KEVCVE-2014-0196 is the only Linux kernel CVE from May 2014 confirmed as actively exploited in the wild. It carries a CVSS score of 5.5 (Medium severity) and is listed in the CISA Known Exploited Vulnerabilities catalog.
| CVE ID | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|
| CVE-2014-0196 | Medium KEV | 5.5 | 2014-05-07 | The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properl… |
| CVE ID | Package | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|---|
| CVE-2014-1737 | linux | High | 7.2 | 2014-05-11 | The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error… | |
| CVE-2014-0240 | linux | Medium | 6.2 | 2014-05-27 | The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned b… | |
| CVE-2014-0196 | linux | Medium KEV | 5.5 | 2014-05-07 | The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver … | |
| CVE-2012-6647 | linux | Medium | 4.9 | 2014-05-26 | The futex_wait_requeue_pi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have t… | |
| CVE-2014-3144 | linux | Medium | 4.9 | 2014-05-11 | The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/c… | |
| CVE-2014-3122 | linux | Medium | 4.9 | 2014-05-11 | The try_to_unmap_cluster function in mm/rmap.c in the Linux kernel before 3.14.3 does not properly consider which pages… | |
| CVE-2014-3145 | linux | Medium | 4.9 | 2014-05-11 | The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kern… | |
| CVE-2014-1738 | linux | Low | 2.1 | 2014-05-11 | The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict ac… |