{"id":"CVE-2014-1438","aliases":["BELL-CVE-2014-1438","DEBIAN-CVE-2014-1438","DLA-0007-1","EUVD-2014-1514","GHSA-xgvj-fh76-mj6g","MGASA-2014-0038","MGASA-2014-0043","MGASA-2014-0044","MGASA-2014-0045","MGASA-2014-0055","MGASA-2014-0064","RHSA-2014:0439","UBUNTU-CVE-2014-1438"],"status":"published","title":"The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel...","description":"The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.","severity":{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00653,"percentile":0.51563,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2014-01-18T00:00:00Z","modified":"2026-10-23T15:47:38Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["3.12.8-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["3.12.8-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["3.12.8-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.8-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.8-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.8-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"linux-2.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-48squeeze7"}]}],"versions":["2.6.32-30","2.6.32-30+m68k.5","2.6.32-31","2.6.32-31~bpo50+1","2.6.32-32","2.6.32-33","2.6.32-34","2.6.32-34squeeze1","2.6.32-35","2.6.32-35squeeze1","2.6.32-35squeeze2","2.6.32-35~bpo50+1","2.6.32-36","2.6.32-37","2.6.32-38","2.6.32-39","2.6.32-39squeeze1","2.6.32-40","2.6.32-41","2.6.32-41squeeze2","2.6.32-42","2.6.32-43","2.6.32-44","2.6.32-45","2.6.32-46","2.6.32-46squeeze1","2.6.32-47","2.6.32-48","2.6.32-48squeeze1","2.6.32-48squeeze3","2.6.32-48squeeze4","2.6.32-48squeeze5","2.6.32-48squeeze6"],"bundled":2},{"source":"osv","ecosystem":"Mageia:3","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kernel-userspace-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-vboxadditions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.16-7.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.16-7.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3-11.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"fglrx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.251-1.mga3.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-broadcom-wl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.30.223.141-10.mga3.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-fglrx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.251-3.mga3.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-nvidia173","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"173.14.38-27.mga3.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-nvidia304","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"304.108-12.mga3.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-nvidia-current","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"319.60-11.mga3.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-1.mga3"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:3","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-0.rt25.1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kernel-tmb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kernel-vserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-0.vs2.3.6.8.1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-vserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-0.vs2.3.6.8.1.mga4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-2135-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2138-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2113-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2141-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1052914","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.openwall.com/lists/oss-security/2014/01/14/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","web","report"]},{"url":"http://www.ubuntu.com/usn/USN-2136-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/64781","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2139-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126874.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26bef1318adc1b3a530ecc807ef99346db2aa8b0","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2134-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:038","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2117-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://github.com/torvalds/linux/commit/26bef1318adc1b3a530ecc807ef99346db2aa8b0","tags":["x_refsource_CONFIRM","x_transferred","fix"]},{"url":"http://www.ubuntu.com/usn/USN-2133-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id/1029592","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126858.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lkml.org/lkml/2014/1/9/637","tags":["mailing-list","x_refsource_MLIST","x_transferred","web","report"]},{"url":"http://www.halfdog.net/Security/2013/Vm86SyscallTaskSwitchKernelPanic/","tags":["x_refsource_MISC","x_transferred","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1438","tags":["advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=26bef1318adc1b3a530ecc807ef99346db2aa8b0"},{"url":"http://www.halfdog.net/Security/2013/Vm86SyscallTaskSwitchKernelPanic"},{"url":"https://github.com/advisories/GHSA-xgvj-fh76-mj6g"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2014-1438","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-1438","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0038.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=6077","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12517","tags":["report"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.25","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.26","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.27","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.28","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2014-0043.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12518","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2014-0044.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12519","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2014-0045.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12520","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2014-0055.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12521","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2014-0064.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12526","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0439","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1016735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1032245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1035875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1058748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1058848","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1062356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1064253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1067880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1074471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1077343","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0439.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1024854","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4483","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-7263","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7263","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7263","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-7265","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7265","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7265","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-7339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1079214","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7339","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7339","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0069","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0069","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0069","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1438","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1438","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1690","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1690","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1690","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1874","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1874","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1874","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-2309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2309","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-2523","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2523","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2523","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-1438","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2113-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2117-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2133-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2134-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2135-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2136-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2138-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2139-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2141-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2233-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2234-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-1438","description":"The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.","status":"published","published":"2014-01-18T22:00:00Z","modified":"2024-08-06T09:42:35.486Z","updated_at":"2026-11-02T14:33:46.310517Z"}],"euvd":[{"id":"EUVD-2014-1514","description":"The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.","status":"published","published":"2014-01-18T22:00:00Z","modified":"2024-08-06T09:42:35Z","updated_at":"2026-11-03T01:57:18.349202Z"}],"ghsa":[{"id":"GHSA-xgvj-fh76-mj6g","title":"The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel...","description":"The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.","status":"published","published":"2022-05-17T04:49:13Z","modified":"2025-04-11T04:19:20Z","updated_at":"2026-11-02T15:01:15.928203Z"}],"nvd":[{"id":"CVE-2014-1438","description":"The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.","status":"published","published":"2014-01-18T22:55:03.21Z","modified":"2026-06-17T00:04:53.453Z","cvss":[{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:53.330367Z"}],"osv":[{"id":"BELL-CVE-2014-1438","title":"CVE-2014-1438 does not affect BellSoft software","status":"withdrawn","published":"2014-01-18T22:55:00Z","modified":"2026-01-28T07:20:18.931719Z","cvss":[{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","level":"medium"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2014-1438","description":"The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.","status":"published","published":"2014-01-18T22:55:03Z","modified":"2026-04-16T06:23:36.922127688Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2014-1438","description":"The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.","status":"published","published":"2014-01-18T22:55:03.21Z","modified":"2026-10-23T15:47:38.4495674Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"DLA-0007-1","title":"linux-2.6 - security update","status":"published","published":"2014-06-19T00:00:00Z","modified":"2026-03-09T01:01:00.993833Z","updated_at":"2026-11-02T15:46:08.746073Z"},{"id":"MGASA-2014-0038","title":"Updated kernel package fixes one critical and a few other security issues","description":"This kernel update provides an update to the 3.10 longterm branch,\ncurrently 3.10.28 and fixes the following security issues:\n\nThe ath9k_htc_set_bssid_mask function in \ndrivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through\n3.12 uses a BSSID masking approach to determine the set of MAC addresses\non which a Wi-Fi device is listening, which allows remote attackers to\ndiscover the original MAC address after spoofing by sending a series of\npackets to MAC addresses with certain bit manipulations. (CVE-2013-4579)\n\nPageexec reported a bug in the Linux kernel's recvmmsg syscall when called\nfrom code using the x32 ABI. An unprivileged local user could exploit this\nflaw to cause a denial of service (system crash) or gain administrator\nprivileges (CVE-2014-0038)\n\nFaults during task-switch due to unhandled FPU-exceptions allow to\nkill processes at random on all affected kernels, resulting in local\nDOS in the end. One some architectures, privilege escalation under\nnon-common circumstances is possible. (CVE-2014-1438)\n\nThe hamradio yam_ioctl() code fails to initialise the cmd field of the\nstruct yamdrv_ioctl_cfg leading to a 4-byte info leak. (CVE-2014-1446)\n\nLinux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)\nsupport for IRC protocol(NF_NAT_IRC), is vulnerable to an information\nleakage flaw. It could occur when communicating over direct\nclient-to-client IRC connection(/dcc) via a NAT-ed network. Kernel\nattempts to mangle IRC TCP packet's content, wherein an uninitialised\n'buffer' object is copied to a socket buffer and sent over to the other\nend of a connection. (CVE-2014-1690)\n\nIt also fixes an issue where some laptops are forced to use\nvesa driver \u0026 No ACPI (mga#6077)\n\nFor other upstream fixes, see the referenced changelogs.\n\nThe proprietary fglrx driver has also been updated from Catalyst\n13.11-beta6 to Catalyst 13.12 official driver.\n","status":"published","published":"2014-02-08T19:01:59Z","modified":"2026-04-16T06:25:36.178691992Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"MGASA-2014-0043","title":"Updated kernel-linus package fixes multiple vulnerabilities","description":"This kernel update provides an update to the 3.10 longterm branch,\ncurrently 3.10.28 and fixes the following security issues:\n\nThe ath9k_htc_set_bssid_mask function in \ndrivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through\n3.12 uses a BSSID masking approach to determine the set of MAC addresses\non which a Wi-Fi device is listening, which allows remote attackers to\ndiscover the original MAC address after spoofing by sending a series of\npackets to MAC addresses with certain bit manipulations. (CVE-2013-4579)\n\nArray index error in the kvm_vm_ioctl_create_vcpu function in \nvirt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through\n3.12.5 allows local users to gain privileges via a large id value\n(CVE-2013-4587)\n\nThe apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem\nin the Linux kernel through 3.12.5 allows guest OS users to cause a denial\nof service (divide-by-zero error and host OS crash) via crafted\nmodifications of the TMICT value. (CVE-2013-6367)\n\nThe KVM subsystem in the Linux kernel through 3.12.5 allows local users to\ngain privileges or cause a denial of service (system crash) via a VAPIC\nsynchronization operation involving a page-end address.  (CVE-2013-6368)\n\nThe recalculate_apic_map function in arch/x86/kvm/lapic.c in the KVM\nsubsystem  in the Linux kernel through 3.12.5 allows guest OS users to\ncause a denial of service (host OS crash) via a crafted ICR write\noperation in x2apic mode. (CVE-2013-6376)\n\nMultiple buffer underflows in the XFS implementation in the Linux kernel\nthrough 3.12.1 allow local users to cause a denial of service (memory\ncorruption) or possibly have unspecified other impact by leveraging the\nCAP_SYS_ADMIN capability for a (1) XFS_IOC_ATTRLIST_BY_HANDLE or (2)\nXFS_IOC_ATTRLIST_BY_HANDLE_32 ioctl call with a crafted length value,\nrelated to the xfs_attrlist_by_handle function in fs/xfs/xfs_ioctl.c\nand the xfs_compat_attrlist_by_handle function in fs/xfs/xfs_ioctl32.c.\n(CVE-2013-6382)\n\nPageexec reported a bug in the Linux kernel's recvmmsg syscall when called\nfrom code using the x32 ABI. An unprivileged local user could exploit this\nflaw to cause a denial of service (system crash) or gain administrator\nprivileges (CVE-2014-0038)\n\nFaults during task-switch due to unhandled FPU-exceptions allow to\nkill processes at random on all affected kernels, resulting in local\nDOS in the end. One some architectures, privilege escalation under\nnon-common circumstances is possible. (CVE-2014-1438)\n\nThe hamradio yam_ioctl() code fails to initialise the cmd field of the\nstruct yamdrv_ioctl_cfg leading to a 4-byte info leak. (CVE-2014-1446)\n\nLinux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)\nsupport for IRC protocol(NF_NAT_IRC), is vulnerable to an information\nleakage flaw. It could occur when communicating over direct\nclient-to-client IRC connection(/dcc) via a NAT-ed network. Kernel\nattempts to mangle IRC TCP packet's content, wherein an uninitialised\n'buffer' object is copied to a socket buffer and sent over to the other\nend of a connection. (CVE-2014-1690)\n\nFor other changes, see the referenced changelogs:\n","status":"published","published":"2014-02-10T20:03:47Z","modified":"2026-04-16T06:25:18.220749727Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"MGASA-2014-0044","title":"Updated kernel-rt packages fix multiple vulnerabilities","description":"This kernel update provides an update to the 3.10 longterm branch,\ncurrently 3.10.28 and fixes the following security issues:\n\nThe ath9k_htc_set_bssid_mask function in \ndrivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through\n3.12 uses a BSSID masking approach to determine the set of MAC addresses\non which a Wi-Fi device is listening, which allows remote attackers to\ndiscover the original MAC address after spoofing by sending a series of\npackets to MAC addresses with certain bit manipulations. (CVE-2013-4579)\n\nPageexec reported a bug in the Linux kernel's recvmmsg syscall when called\nfrom code using the x32 ABI. An unprivileged local user could exploit this\nflaw to cause a denial of service (system crash) or gain administrator\nprivileges (CVE-2014-0038)\n\nFaults during task-switch due to unhandled FPU-exceptions allow to\nkill processes at random on all affected kernels, resulting in local\nDOS in the end. One some architectures, privilege escalation under\nnon-common circumstances is possible. (CVE-2014-1438)\n\nThe hamradio yam_ioctl() code fails to initialise the cmd field of the\nstruct yamdrv_ioctl_cfg leading to a 4-byte info leak. (CVE-2014-1446)\n\nLinux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)\nsupport for IRC protocol(NF_NAT_IRC), is vulnerable to an information\nleakage flaw. It could occur when communicating over direct\nclient-to-client IRC connection(/dcc) via a NAT-ed network. Kernel\nattempts to mangle IRC TCP packet's content, wherein an uninitialised\n'buffer' object is copied to a socket buffer and sent over to the other\nend of a connection. (CVE-2014-1690)\n\nThe -rt patch has been updated to -rt25\n\nFor other changes, see the referenced changelogs:\n","status":"published","published":"2014-02-10T20:06:51Z","modified":"2026-04-16T06:26:02.002006243Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"MGASA-2014-0045","title":"Updated kernel-tmb packages fix multiple vulnerabilities","description":"This kernel update provides an update to the 3.10 longterm branch,\ncurrently 3.10.28 and fixes the following security issues:\n\nThe ath9k_htc_set_bssid_mask function in \ndrivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through\n3.12 uses a BSSID masking approach to determine the set of MAC addresses\non which a Wi-Fi device is listening, which allows remote attackers to\ndiscover the original MAC address after spoofing by sending a series of\npackets to MAC addresses with certain bit manipulations. (CVE-2013-4579)\n\nPageexec reported a bug in the Linux kernel's recvmmsg syscall when called\nfrom code using the x32 ABI. An unprivileged local user could exploit this\nflaw to cause a denial of service (system crash) or gain administrator\nprivileges (CVE-2014-0038)\n\nFaults during task-switch due to unhandled FPU-exceptions allow to\nkill processes at random on all affected kernels, resulting in local\nDOS in the end. One some architectures, privilege escalation under\nnon-common circumstances is possible. (CVE-2014-1438)\n\nThe hamradio yam_ioctl() code fails to initialise the cmd field of the\nstruct yamdrv_ioctl_cfg leading to a 4-byte info leak. (CVE-2014-1446)\n\nLinux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)\nsupport for IRC protocol(NF_NAT_IRC), is vulnerable to an information\nleakage flaw. It could occur when communicating over direct\nclient-to-client IRC connection(/dcc) via a NAT-ed network. Kernel\nattempts to mangle IRC TCP packet's content, wherein an uninitialised\n'buffer' object is copied to a socket buffer and sent over to the other\nend of a connection. (CVE-2014-1690)\n\nFor other changes, see the referenced changelogs:\n","status":"published","published":"2014-02-10T20:09:03Z","modified":"2026-04-16T06:26:21.215125599Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"MGASA-2014-0055","title":"Updated kernel-vserver packages fix multiple vulnerabilities","description":"This kernel update provides an update to the 3.10 longterm branch,\ncurrently 3.10.28 and fixes the following security issues:\n\nThe ath9k_htc_set_bssid_mask function in \ndrivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through\n3.12 uses a BSSID masking approach to determine the set of MAC addresses\non which a Wi-Fi device is listening, which allows remote attackers to\ndiscover the original MAC address after spoofing by sending a series of\npackets to MAC addresses with certain bit manipulations. (CVE-2013-4579)\n\nPageexec reported a bug in the Linux kernel's recvmmsg syscall when called\nfrom code using the x32 ABI. An unprivileged local user could exploit this\nflaw to cause a denial of service (system crash) or gain administrator\nprivileges (CVE-2014-0038)\n\nFaults during task-switch due to unhandled FPU-exceptions allow to\nkill processes at random on all affected kernels, resulting in local\nDOS in the end. One some architectures, privilege escalation under\nnon-common circumstances is possible. (CVE-2014-1438)\n\nThe hamradio yam_ioctl() code fails to initialise the cmd field of the\nstruct yamdrv_ioctl_cfg leading to a 4-byte info leak. (CVE-2014-1446)\n\nLinux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)\nsupport for IRC protocol(NF_NAT_IRC), is vulnerable to an information\nleakage flaw. It could occur when communicating over direct\nclient-to-client IRC connection(/dcc) via a NAT-ed network. Kernel\nattempts to mangle IRC TCP packet's content, wherein an uninitialised\n'buffer' object is copied to a socket buffer and sent over to the other\nend of a connection. (CVE-2014-1690)\n\nFor other changes, see the referenced changelogs:\n","status":"published","published":"2014-02-11T22:38:44Z","modified":"2026-04-16T06:23:28.368599225Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"MGASA-2014-0064","title":"Updated kernel-vserver packages fix security vulnerability","description":"This kernel update provides an update to the 3.10 longterm branch,\ncurrently 3.10.28 and fixes the following security issues:\n\nThe ath9k_htc_set_bssid_mask function in \ndrivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through\n3.12 uses a BSSID masking approach to determine the set of MAC addresses\non which a Wi-Fi device is listening, which allows remote attackers to\ndiscover the original MAC address after spoofing by sending a series of\npackets to MAC addresses with certain bit manipulations. (CVE-2013-4579)\n\nPageexec reported a bug in the Linux kernel's recvmmsg syscall when called\nfrom code using the x32 ABI. An unprivileged local user could exploit this\nflaw to cause a denial of service (system crash) or gain administrator\nprivileges (CVE-2014-0038)\n\nFaults during task-switch due to unhandled FPU-exceptions allow to\nkill processes at random on all affected kernels, resulting in local\nDOS in the end. One some architectures, privilege escalation under\nnon-common circumstances is possible. (CVE-2014-1438)\n\nThe hamradio yam_ioctl() code fails to initialise the cmd field of the\nstruct yamdrv_ioctl_cfg leading to a 4-byte info leak. (CVE-2014-1446)\n\nLinux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)\nsupport for IRC protocol(NF_NAT_IRC), is vulnerable to an information\nleakage flaw. It could occur when communicating over direct\nclient-to-client IRC connection(/dcc) via a NAT-ed network. Kernel\nattempts to mangle IRC TCP packet's content, wherein an uninitialised\n'buffer' object is copied to a socket buffer and sent over to the other\nend of a connection. (CVE-2014-1690)\n\nFor other changes, see the referenced changelogs\n","status":"published","published":"2014-02-12T22:53:19Z","modified":"2026-04-16T06:23:31.709423062Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"RHSA-2014:0439","title":"Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update","status":"published","published":"2024-09-13T08:52:11Z","modified":"2026-01-07T10:21:55.644433Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"UBUNTU-CVE-2014-1438","description":"The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.","status":"withdrawn","published":"2014-01-18T00:00:00Z","modified":"2026-02-04T04:33:46.67593Z","updated_at":"2026-11-02T15:54:07.855521Z"}]}}