{"id":"CVE-2014-1690","aliases":["DEBIAN-CVE-2014-1690","EUVD-2014-1764","GHSA-w8c8-3p33-35r8","MGASA-2014-0038","MGASA-2014-0043","MGASA-2014-0044","MGASA-2014-0045","MGASA-2014-0055","MGASA-2014-0064","RHSA-2014:0439","UBUNTU-CVE-2014-1690"],"status":"published","title":"The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote...","description":"The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.","severity":{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03924,"percentile":0.90414,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2014-02-08T19:01:59Z","modified":"2026-10-23T15:47:33Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["3.12.8-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["3.12.8-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["3.12.8-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.8-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.8-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.8-1"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kernel-userspace-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-vboxadditions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.16-7.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.16-7.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3-11.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"fglrx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.251-1.mga3.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-broadcom-wl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.30.223.141-10.mga3.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-fglrx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.251-3.mga3.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-nvidia173","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"173.14.38-27.mga3.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-nvidia304","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"304.108-12.mga3.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kmod-nvidia-current","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"319.60-11.mga3.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-1.mga3"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:3","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-0.rt25.1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kernel-tmb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"kernel-vserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-0.vs2.3.6.8.1.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-vserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.28-0.vs2.3.6.8.1.mga4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.33-rt32.33.el6rt"}]}],"bundled":10}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-2137-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2140-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2158-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Patch","Vendor Advisory","advisory","article","fix"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1058748","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"http://www.openwall.com/lists/oss-security/2014/01/28/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","advisory","article","fix"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2690d97ade05c5325cbf7c72b94b90d265659886","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","Third Party Advisory","advisory","evidence","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1690","tags":["advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2690d97ade05c5325cbf7c72b94b90d265659886"},{"url":"https://github.com/advisories/GHSA-w8c8-3p33-35r8"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-1690","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0038.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=6077","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12517","tags":["report"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.25","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.26","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.27","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.28","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2014-0043.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12518","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2014-0044.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12519","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2014-0045.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12520","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2014-0055.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12521","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2014-0064.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12526","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0439","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1016735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1032245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1035875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1052914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1058848","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1062356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1064253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1067880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1074471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1077343","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0439.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1024854","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4483","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-7263","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7263","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7263","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-7265","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7265","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7265","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-7339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1079214","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7339","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7339","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0069","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0069","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0069","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1438","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1438","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1438","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1690","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1690","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1874","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1874","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1874","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-2309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2309","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-2523","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2523","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2523","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-1690","tags":["report"]},{"url":"https://git.kernel.org/linus/2690d97ade05c5325cbf7c72b94b90d265659886","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2014/01/28","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2137-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2140-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2158-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-1690","description":"The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.","status":"published","published":"2014-02-28T02:00:00Z","modified":"2024-08-06T09:50:10.62Z","updated_at":"2026-11-02T14:33:45.938615Z"}],"euvd":[{"id":"EUVD-2014-1764","description":"The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.","status":"published","published":"2014-02-28T02:00:00Z","modified":"2024-08-06T09:50:10Z","updated_at":"2026-11-03T01:57:17.345507Z"}],"ghsa":[{"id":"GHSA-w8c8-3p33-35r8","title":"The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote...","description":"The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.","status":"published","published":"2022-05-13T01:17:56Z","modified":"2023-02-20T05:05:47Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:54:11.398505Z"}],"nvd":[{"id":"CVE-2014-1690","description":"The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.","status":"published","published":"2014-02-28T06:18:54.557Z","modified":"2026-06-17T00:05:22.93Z","cvss":[{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:53.330367Z"}],"osv":[{"id":"CVE-2014-1690","description":"The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.","status":"published","published":"2014-02-28T06:18:54Z","modified":"2026-04-16T06:25:44.803675973Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2014-1690","description":"The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.","status":"published","published":"2014-02-28T06:18:54.557Z","modified":"2026-10-23T15:47:33.661177844Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"MGASA-2014-0038","title":"Updated kernel package fixes one critical and a few other security issues","description":"This kernel update provides an update to the 3.10 longterm branch,\ncurrently 3.10.28 and fixes the following security issues:\n\nThe ath9k_htc_set_bssid_mask function in \ndrivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through\n3.12 uses a BSSID masking approach to determine the set of MAC addresses\non which a Wi-Fi device is listening, which allows remote attackers to\ndiscover the original MAC address after spoofing by sending a series of\npackets to MAC addresses with certain bit manipulations. (CVE-2013-4579)\n\nPageexec reported a bug in the Linux kernel's recvmmsg syscall when called\nfrom code using the x32 ABI. An unprivileged local user could exploit this\nflaw to cause a denial of service (system crash) or gain administrator\nprivileges (CVE-2014-0038)\n\nFaults during task-switch due to unhandled FPU-exceptions allow to\nkill processes at random on all affected kernels, resulting in local\nDOS in the end. One some architectures, privilege escalation under\nnon-common circumstances is possible. (CVE-2014-1438)\n\nThe hamradio yam_ioctl() code fails to initialise the cmd field of the\nstruct yamdrv_ioctl_cfg leading to a 4-byte info leak. (CVE-2014-1446)\n\nLinux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)\nsupport for IRC protocol(NF_NAT_IRC), is vulnerable to an information\nleakage flaw. It could occur when communicating over direct\nclient-to-client IRC connection(/dcc) via a NAT-ed network. Kernel\nattempts to mangle IRC TCP packet's content, wherein an uninitialised\n'buffer' object is copied to a socket buffer and sent over to the other\nend of a connection. (CVE-2014-1690)\n\nIt also fixes an issue where some laptops are forced to use\nvesa driver \u0026 No ACPI (mga#6077)\n\nFor other upstream fixes, see the referenced changelogs.\n\nThe proprietary fglrx driver has also been updated from Catalyst\n13.11-beta6 to Catalyst 13.12 official driver.\n","status":"published","published":"2014-02-08T19:01:59Z","modified":"2026-04-16T06:25:36.178691992Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"MGASA-2014-0043","title":"Updated kernel-linus package fixes multiple vulnerabilities","description":"This kernel update provides an update to the 3.10 longterm branch,\ncurrently 3.10.28 and fixes the following security issues:\n\nThe ath9k_htc_set_bssid_mask function in \ndrivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through\n3.12 uses a BSSID masking approach to determine the set of MAC addresses\non which a Wi-Fi device is listening, which allows remote attackers to\ndiscover the original MAC address after spoofing by sending a series of\npackets to MAC addresses with certain bit manipulations. (CVE-2013-4579)\n\nArray index error in the kvm_vm_ioctl_create_vcpu function in \nvirt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through\n3.12.5 allows local users to gain privileges via a large id value\n(CVE-2013-4587)\n\nThe apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem\nin the Linux kernel through 3.12.5 allows guest OS users to cause a denial\nof service (divide-by-zero error and host OS crash) via crafted\nmodifications of the TMICT value. (CVE-2013-6367)\n\nThe KVM subsystem in the Linux kernel through 3.12.5 allows local users to\ngain privileges or cause a denial of service (system crash) via a VAPIC\nsynchronization operation involving a page-end address.  (CVE-2013-6368)\n\nThe recalculate_apic_map function in arch/x86/kvm/lapic.c in the KVM\nsubsystem  in the Linux kernel through 3.12.5 allows guest OS users to\ncause a denial of service (host OS crash) via a crafted ICR write\noperation in x2apic mode. (CVE-2013-6376)\n\nMultiple buffer underflows in the XFS implementation in the Linux kernel\nthrough 3.12.1 allow local users to cause a denial of service (memory\ncorruption) or possibly have unspecified other impact by leveraging the\nCAP_SYS_ADMIN capability for a (1) XFS_IOC_ATTRLIST_BY_HANDLE or (2)\nXFS_IOC_ATTRLIST_BY_HANDLE_32 ioctl call with a crafted length value,\nrelated to the xfs_attrlist_by_handle function in fs/xfs/xfs_ioctl.c\nand the xfs_compat_attrlist_by_handle function in fs/xfs/xfs_ioctl32.c.\n(CVE-2013-6382)\n\nPageexec reported a bug in the Linux kernel's recvmmsg syscall when called\nfrom code using the x32 ABI. An unprivileged local user could exploit this\nflaw to cause a denial of service (system crash) or gain administrator\nprivileges (CVE-2014-0038)\n\nFaults during task-switch due to unhandled FPU-exceptions allow to\nkill processes at random on all affected kernels, resulting in local\nDOS in the end. One some architectures, privilege escalation under\nnon-common circumstances is possible. (CVE-2014-1438)\n\nThe hamradio yam_ioctl() code fails to initialise the cmd field of the\nstruct yamdrv_ioctl_cfg leading to a 4-byte info leak. (CVE-2014-1446)\n\nLinux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)\nsupport for IRC protocol(NF_NAT_IRC), is vulnerable to an information\nleakage flaw. It could occur when communicating over direct\nclient-to-client IRC connection(/dcc) via a NAT-ed network. Kernel\nattempts to mangle IRC TCP packet's content, wherein an uninitialised\n'buffer' object is copied to a socket buffer and sent over to the other\nend of a connection. (CVE-2014-1690)\n\nFor other changes, see the referenced changelogs:\n","status":"published","published":"2014-02-10T20:03:47Z","modified":"2026-04-16T06:25:18.220749727Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"MGASA-2014-0044","title":"Updated kernel-rt packages fix multiple vulnerabilities","description":"This kernel update provides an update to the 3.10 longterm branch,\ncurrently 3.10.28 and fixes the following security issues:\n\nThe ath9k_htc_set_bssid_mask function in \ndrivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through\n3.12 uses a BSSID masking approach to determine the set of MAC addresses\non which a Wi-Fi device is listening, which allows remote attackers to\ndiscover the original MAC address after spoofing by sending a series of\npackets to MAC addresses with certain bit manipulations. (CVE-2013-4579)\n\nPageexec reported a bug in the Linux kernel's recvmmsg syscall when called\nfrom code using the x32 ABI. An unprivileged local user could exploit this\nflaw to cause a denial of service (system crash) or gain administrator\nprivileges (CVE-2014-0038)\n\nFaults during task-switch due to unhandled FPU-exceptions allow to\nkill processes at random on all affected kernels, resulting in local\nDOS in the end. One some architectures, privilege escalation under\nnon-common circumstances is possible. (CVE-2014-1438)\n\nThe hamradio yam_ioctl() code fails to initialise the cmd field of the\nstruct yamdrv_ioctl_cfg leading to a 4-byte info leak. (CVE-2014-1446)\n\nLinux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)\nsupport for IRC protocol(NF_NAT_IRC), is vulnerable to an information\nleakage flaw. It could occur when communicating over direct\nclient-to-client IRC connection(/dcc) via a NAT-ed network. Kernel\nattempts to mangle IRC TCP packet's content, wherein an uninitialised\n'buffer' object is copied to a socket buffer and sent over to the other\nend of a connection. (CVE-2014-1690)\n\nThe -rt patch has been updated to -rt25\n\nFor other changes, see the referenced changelogs:\n","status":"published","published":"2014-02-10T20:06:51Z","modified":"2026-04-16T06:26:02.002006243Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"MGASA-2014-0045","title":"Updated kernel-tmb packages fix multiple vulnerabilities","description":"This kernel update provides an update to the 3.10 longterm branch,\ncurrently 3.10.28 and fixes the following security issues:\n\nThe ath9k_htc_set_bssid_mask function in \ndrivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through\n3.12 uses a BSSID masking approach to determine the set of MAC addresses\non which a Wi-Fi device is listening, which allows remote attackers to\ndiscover the original MAC address after spoofing by sending a series of\npackets to MAC addresses with certain bit manipulations. (CVE-2013-4579)\n\nPageexec reported a bug in the Linux kernel's recvmmsg syscall when called\nfrom code using the x32 ABI. An unprivileged local user could exploit this\nflaw to cause a denial of service (system crash) or gain administrator\nprivileges (CVE-2014-0038)\n\nFaults during task-switch due to unhandled FPU-exceptions allow to\nkill processes at random on all affected kernels, resulting in local\nDOS in the end. One some architectures, privilege escalation under\nnon-common circumstances is possible. (CVE-2014-1438)\n\nThe hamradio yam_ioctl() code fails to initialise the cmd field of the\nstruct yamdrv_ioctl_cfg leading to a 4-byte info leak. (CVE-2014-1446)\n\nLinux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)\nsupport for IRC protocol(NF_NAT_IRC), is vulnerable to an information\nleakage flaw. It could occur when communicating over direct\nclient-to-client IRC connection(/dcc) via a NAT-ed network. Kernel\nattempts to mangle IRC TCP packet's content, wherein an uninitialised\n'buffer' object is copied to a socket buffer and sent over to the other\nend of a connection. (CVE-2014-1690)\n\nFor other changes, see the referenced changelogs:\n","status":"published","published":"2014-02-10T20:09:03Z","modified":"2026-04-16T06:26:21.215125599Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"MGASA-2014-0055","title":"Updated kernel-vserver packages fix multiple vulnerabilities","description":"This kernel update provides an update to the 3.10 longterm branch,\ncurrently 3.10.28 and fixes the following security issues:\n\nThe ath9k_htc_set_bssid_mask function in \ndrivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through\n3.12 uses a BSSID masking approach to determine the set of MAC addresses\non which a Wi-Fi device is listening, which allows remote attackers to\ndiscover the original MAC address after spoofing by sending a series of\npackets to MAC addresses with certain bit manipulations. (CVE-2013-4579)\n\nPageexec reported a bug in the Linux kernel's recvmmsg syscall when called\nfrom code using the x32 ABI. An unprivileged local user could exploit this\nflaw to cause a denial of service (system crash) or gain administrator\nprivileges (CVE-2014-0038)\n\nFaults during task-switch due to unhandled FPU-exceptions allow to\nkill processes at random on all affected kernels, resulting in local\nDOS in the end. One some architectures, privilege escalation under\nnon-common circumstances is possible. (CVE-2014-1438)\n\nThe hamradio yam_ioctl() code fails to initialise the cmd field of the\nstruct yamdrv_ioctl_cfg leading to a 4-byte info leak. (CVE-2014-1446)\n\nLinux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)\nsupport for IRC protocol(NF_NAT_IRC), is vulnerable to an information\nleakage flaw. It could occur when communicating over direct\nclient-to-client IRC connection(/dcc) via a NAT-ed network. Kernel\nattempts to mangle IRC TCP packet's content, wherein an uninitialised\n'buffer' object is copied to a socket buffer and sent over to the other\nend of a connection. (CVE-2014-1690)\n\nFor other changes, see the referenced changelogs:\n","status":"published","published":"2014-02-11T22:38:44Z","modified":"2026-04-16T06:23:28.368599225Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"MGASA-2014-0064","title":"Updated kernel-vserver packages fix security vulnerability","description":"This kernel update provides an update to the 3.10 longterm branch,\ncurrently 3.10.28 and fixes the following security issues:\n\nThe ath9k_htc_set_bssid_mask function in \ndrivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through\n3.12 uses a BSSID masking approach to determine the set of MAC addresses\non which a Wi-Fi device is listening, which allows remote attackers to\ndiscover the original MAC address after spoofing by sending a series of\npackets to MAC addresses with certain bit manipulations. (CVE-2013-4579)\n\nPageexec reported a bug in the Linux kernel's recvmmsg syscall when called\nfrom code using the x32 ABI. An unprivileged local user could exploit this\nflaw to cause a denial of service (system crash) or gain administrator\nprivileges (CVE-2014-0038)\n\nFaults during task-switch due to unhandled FPU-exceptions allow to\nkill processes at random on all affected kernels, resulting in local\nDOS in the end. One some architectures, privilege escalation under\nnon-common circumstances is possible. (CVE-2014-1438)\n\nThe hamradio yam_ioctl() code fails to initialise the cmd field of the\nstruct yamdrv_ioctl_cfg leading to a 4-byte info leak. (CVE-2014-1446)\n\nLinux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)\nsupport for IRC protocol(NF_NAT_IRC), is vulnerable to an information\nleakage flaw. It could occur when communicating over direct\nclient-to-client IRC connection(/dcc) via a NAT-ed network. Kernel\nattempts to mangle IRC TCP packet's content, wherein an uninitialised\n'buffer' object is copied to a socket buffer and sent over to the other\nend of a connection. (CVE-2014-1690)\n\nFor other changes, see the referenced changelogs\n","status":"published","published":"2014-02-12T22:53:19Z","modified":"2026-04-16T06:23:31.709423062Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"RHSA-2014:0439","title":"Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update","status":"published","published":"2024-09-13T08:52:11Z","modified":"2026-01-07T10:21:55.644433Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"UBUNTU-CVE-2014-1690","description":"The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.","status":"withdrawn","published":"2014-02-28T00:00:00Z","modified":"2026-02-04T02:36:47.556932Z","updated_at":"2026-11-02T15:54:07.855521Z"}]}}