CVE-2014-8173
The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux...
7.2 HighFix available
The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock.
Exploit likelihood
0.40%Down 0.6 points since Feb 4, 2022
What each source reports
NVD Score used
The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock.
- Record
CVE-2014-8173- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock.
- Record
CVE-2014-8173- Updated
- 2026-11-02
EUVDEUVD-2014-8014 No score
The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock.
- Record
EUVD-2014-8014- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j9vf-fgh2-x3qm No score
The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux...
The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock.
- Record
GHSA-j9vf-fgh2-x3qm- Updated
- 2026-11-02
OSVBELL-CVE-2014-8173
CVE-2014-8173 does not affect BellSoft software
- Record
BELL-CVE-2014-8173- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
OSVRHSA-2015:0290
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2015:0290- CVSS 3.0
- 6.2 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVRHSA-2015:0694
Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
- Record
RHSA-2015:0694- CVSS 3.0
- 6.2 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV No score
The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock.
- Record
CVE-2014-8173- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-8173 No score
The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock.
- Record
DEBIAN-CVE-2014-8173- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-8173 No score
The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock.
- Record
UBUNTU-CVE-2014-8173- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 3.13.4-1 | 3.13.4-1 |
linuxDebian:13 |
before 3.13.4-1 | 3.13.4-1 |
linuxDebian:14 |
before 3.13.4-1 | 3.13.4-1 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perfRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
Show 86 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-perf-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernelRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debugRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-develRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-docRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-headersRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-toolsRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perfRed Hat:enterprise_linux:7::client From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perfRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernelRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-develRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-docRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-headersRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-toolsRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perfRed Hat:enterprise_linux:7::computenode From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perfRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernelRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-bootwrapperRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debugRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-develRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-docRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-headersRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-kdumpRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-kdump-develRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-toolsRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perfRed Hat:enterprise_linux:7::server From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perfRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernelRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-develRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-docRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-headersRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-toolsRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
perfRed Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs |
before 0:3.10.0-229.el7 | 0:3.10.0-229.el7 |
kernel-rtRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-debugRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-debuginfo-common-x86_64Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-docRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-firmwareRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-traceRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs |
before 1:3.10.0-229.rt56.144.el6rt | 1:3.10.0-229.rt56.144.el6rt |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-8173 is a high vulnerability (CVSS 7.2) in Linux Kernel, published March 16, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in linux 3.13.4-1.
References
bugzilla.redhat.com/show_bug.cgi?id=1198457
rhn.redhat.com/errata/RHSA-2015-0694.html
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ee53664bda169f519ce3c6a22d378f0b946c8178
lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html
github.com/torvalds/linux/commit/ee53664bda169f519ce3c6a22d378f0b946c8178
Show 92 moreShow less
nvd.nist.gov/vuln/detail/CVE-2014-8173
access.redhat.com/errata/RHSA-2015:0290
docs.bell-sw.com/security/cves/CVE-2014-8173
security-tracker.debian.org/tracker/CVE-2014-8173
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0290.json
cve.org/CVERecord?id=CVE-2014-3690
ubuntu.com/security/CVE-2014-8173