NVD

Id
30079  
Name
CVE-2014-1438  
Description
The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-01-18  
Modified Date
2014-03-16  
Seq
2014-1438  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
158315 30079 CVE-2014-1438 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=26bef1318adc1b3a530ecc807ef99346db2aa8b0  View
158316 30079 CVE-2014-1438 FEDORA-2014-1072  View
158317 30079 CVE-2014-1438 FEDORA-2014-1062  View
158318 30079 CVE-2014-1438 http://www.halfdog.net/Security/2013/Vm86SyscallTaskSwitchKernelPanic/  View
158319 30079 CVE-2014-1438 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8  View
158320 30079 CVE-2014-1438 MDVSA-2014:038  View
158321 30079 CVE-2014-1438 [oss-security] 20140114 Re: Linux kernel: missing CPU-state sanitation during task-switch causes DOS / privilege escalation  View
158322 30079 CVE-2014-1438 64781  View
158323 30079 CVE-2014-1438 1029592  View
158324 30079 CVE-2014-1438 USN-2113-1  View
158325 30079 CVE-2014-1438 USN-2117-1  View
158326 30079 CVE-2014-1438 USN-2133-1  View
158327 30079 CVE-2014-1438 USN-2134-1  View
158328 30079 CVE-2014-1438 USN-2135-1  View
158329 30079 CVE-2014-1438 USN-2136-1  View
158330 30079 CVE-2014-1438 USN-2138-1  View
158331 30079 CVE-2014-1438 USN-2139-1  View
158332 30079 CVE-2014-1438 USN-2141-1  View
158333 30079 CVE-2014-1438 https://bugzilla.redhat.com/show_bug.cgi?id=1052914  View
158334 30079 CVE-2014-1438 https://github.com/torvalds/linux/commit/26bef1318adc1b3a530ecc807ef99346db2aa8b0  View
158335 30079 CVE-2014-1438 [linux-kernel] 20140110 Re: Sanitize CPU-state when switching tasks (was sanitize CPU-state when switching from virtual-8086 mode to other task)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12333 JVNDB-2014-001208 AMD K7 および K8 プラットフォーム上で稼働する Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性 AMD K7 および K8 プラットフォーム上で稼働する Linux Kernel の arch/x86/include/asm/fpu-internal.h の restore_fpu_checking 関数は、EMMS 命令に移る前に保留中の例外を消去しないため、サービス運用妨害 (タスクの強制終了) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2014-1438 68725 CVE-2014-1438 30079 4.7 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001208.html 2014-01-15 2014-01-22 View