CVE-2014-2568
Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c...
CVE-2014-2568 is a low vulnerability (CVSS 2.9) in Linux Kernel, published March 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.01%, the 63rd percentile. Fixed in linux 3.13.7-1.
- Severity
- 2.9 LowCVSS 2.0, NVD
- Exploit chance
- 1.01%EPSS, 63rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.13.7-1linux +82 more
Description
Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 | before 3.13.7-1 | 3.13.7-1 |
linuxDebian:13 | before 3.13.7-1 | 3.13.7-1 |
linuxDebian:14 | before 3.13.7-1 | 3.13.7-1 |
kernelRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debugRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
Show 73 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-headersRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-toolsRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
perfRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-docRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
python-perfRed Hat:enterprise_linux:7::client From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernelRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-develRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-headersRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-toolsRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
perfRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-docRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
python-perfRed Hat:enterprise_linux:7::computenode From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernelRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-bootwrapperRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debugRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-develRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-headersRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-kdumpRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-kdump-develRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-toolsRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
perfRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-docRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
python-perfRed Hat:enterprise_linux:7::server From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernelRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-develRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-headersRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-toolsRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
perfRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-docRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
python-perfRed Hat:enterprise_linux:7::workstation From an advisory covering 8 CVEs | before 0:3.10.0-123.4.2.el7 | 0:3.10.0-123.4.2.el7 |
linuxUbuntu:14.04:LTS | before 3.13.0-29.53, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 33 moreShow less3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.50 | 3.13.0-29.53 |
linuxUbuntu:14.04:LTS From an advisory covering 3 CVEs | before 3.13.0-29.53, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 33 moreShow less3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.50 | 3.13.0-29.53 |
What each source reports
NVD Score used
Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.
- Record
CVE-2014-2568- CVSS 2.0
- 2.9 Low
AV:A/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE ListNo score
Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.
- Record
CVE-2014-2568- Updated
- 2026-11-02
EUVDEUVD-2014-2603No score
Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.
- Record
EUVD-2014-2603- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wcjr-fm9w-6wrpNo score
Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c...
Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.
- Record
GHSA-wcjr-fm9w-6wrp- Weakness
- CWE-416
- Updated
- 2026-11-02
OSVNo score
Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.
- Record
CVE-2014-2568- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-2568No score
Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.
- Record
DEBIAN-CVE-2014-2568- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-2568No score
Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.
- Record
UBUNTU-CVE-2014-2568- Updated
- 2026-11-02
OSVUSN-2240-1No score
linux vulnerabilities
Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or gain administrative privileges. (CVE-2014-3153)
An information leak was discovered in the netfilter subsystem of the Linux kernel. An attacker could exploit this flaw to obtain sensitive information from kernel memory. (CVE-2014-2568)
Sasha Levin reported a bug in the Linux kernel's virtual memory management subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash). (CVE-2014-3122)
- Record
USN-2240-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lkml.org/lkml/2014/3/20/421
bugzilla.redhat.com/show_bug.cgi?id=1079012
ubuntu.com/usn/USN-2240-1
securityfocus.com/bid/66348
secunia.com/advisories/59599
exchange.xforce.ibmcloud.com/vulnerabilities/91922
Show 44 moreShow less
seclists.org/oss-sec/2014/q1/627
openwall.com/lists/oss-security/2014/03/20/16
nvd.nist.gov/vuln/detail/CVE-2014-2568
github.com/advisories/GHSA-wcjr-fm9w-6wrp
security-tracker.debian.org/tracker/CVE-2014-2568
access.redhat.com/errata/RHSA-2014:0786
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0786.json
cve.org/CVERecord?id=CVE-2014-0206
cisa.gov/known-exploited-vulnerabilities-catalog
ubuntu.com/security/CVE-2014-2568