CVE-2014-4157
arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does...
arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECCOMP checks on the fast system-call path, which allows local users to bypass intended PR_SET_SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem.
Exploit likelihood
What each source reports
NVD Score used
arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECCOMP checks on the fast system-call path, which allows local users to bypass intended PR_SET_SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem.
- Record
CVE-2014-4157- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECCOMP checks on the fast system-call path, which allows local users to bypass intended PR_SET_SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem.
- Record
CVE-2014-4157- Updated
- 2026-11-02
EUVDEUVD-2014-4088 No score
arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECCOMP checks on the fast system-call path, which allows local users to bypass intended PR_SET_SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem.
- Record
EUVD-2014-4088- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7f7x-29w2-852x No score
arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does...
arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECCOMP checks on the fast system-call path, which allows local users to bypass intended PR_SET_SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem.
- Record
GHSA-7f7x-29w2-852x- Updated
- 2026-11-02
OSVBELL-CVE-2014-4157
CVE-2014-4157 does not affect BellSoft software
- Record
BELL-CVE-2014-4157- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
OSV No score
arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECCOMP checks on the fast system-call path, which allows local users to bypass intended PR_SET_SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem.
- Record
CVE-2014-4157- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-4157 No score
arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECCOMP checks on the fast system-call path, which allows local users to bypass intended PR_SET_SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem.
- Record
DEBIAN-CVE-2014-4157- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 3.14.7-1 | 3.14.7-1 |
linuxDebian:13 |
before 3.14.7-1 | 3.14.7-1 |
linuxDebian:14 |
before 3.14.7-1 | 3.14.7-1 |
linux-2.6Debian:6.0 From an advisory covering 13 CVEs |
before 2.6.32-48squeeze9, plus listed versions 2.6.32-302.6.32-30+m68k.52.6.32-312.6.32-31~bpo50+12.6.32-32 Show 30 moreShow less2.6.32-332.6.32-342.6.32-34squeeze12.6.32-352.6.32-35squeeze12.6.32-35squeeze22.6.32-35~bpo50+12.6.32-362.6.32-372.6.32-382.6.32-392.6.32-39squeeze12.6.32-402.6.32-412.6.32-41squeeze22.6.32-422.6.32-432.6.32-442.6.32-452.6.32-462.6.32-46squeeze12.6.32-472.6.32-482.6.32-48squeeze12.6.32-48squeeze32.6.32-48squeeze42.6.32-48squeeze52.6.32-48squeeze62.6.32-48squeeze72.6.32-48squeeze8 |
2.6.32-48squeeze9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-4157 is a medium vulnerability (CVSS 4.6) in Linux Kernel, published June 23, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 43rd percentile. Fixed in linux 3.14.7-1.
References
openwall.com/lists/oss-security/2014/06/17/17
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=137f7df8cead00688524c82360930845396b8a21
bugs.debian.org/cgi-bin/bugreport.cgi?bug=751417
openwall.com/lists/oss-security/2014/06/16/1
github.com/torvalds/linux/commit/137f7df8cead00688524c82360930845396b8a21