{"id":"CVE-2014-7284","aliases":["BELL-CVE-2014-7284","DEBIAN-CVE-2014-7284","EUVD-2014-7155","GHSA-qghr-qj2v-qq89","MGASA-2014-0451","MGASA-2014-0452","MGASA-2014-0455","UBUNTU-CVE-2014-7284","USN-2290-1"],"status":"published","title":"The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x...","description":"The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03751,"percentile":0.89944,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2014-07-17T01:33:01Z","modified":"2026-10-23T15:47:28Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["3.16.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["3.16.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["3.16.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-32.57"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.2-1"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.23-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-tmb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.23-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-vserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.23-0.vs2.3.6.13.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"util-vserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.216-0.pre3062.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-32.57"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-32.57"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55"],"bundled":7}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1148788","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.5","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2014/10/01/19","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://web.archive.org/web/20141002163852/http://secondlookforensics.com/ngro-linux-kernel-bug/","tags":["x_refsource_MISC","x_transferred","Exploit","evidence"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d4405226d27b3a215e4d03cfa51f536244e5de7","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://github.com/torvalds/linux/commit/3d4405226d27b3a215e4d03cfa51f536244e5de7","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7284"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3d4405226d27b3a215e4d03cfa51f536244e5de7"},{"url":"https://web.archive.org/web/20141002163852/http://secondlookforensics.com/ngro-linux-kernel-bug"},{"url":"https://github.com/advisories/GHSA-qghr-qj2v-qq89"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2014-7284","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-7284","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0451.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14003","tags":["report"]},{"url":"http://kernelnewbies.org/Linux_3.13","tags":["web"]},{"url":"http://kernelnewbies.org/Linux_3.14","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.1","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.2","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.3","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.4","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.5","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.6","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.7","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.9","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.10","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.11","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.12","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.13","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.14","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.15","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.16","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.17","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.18","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.19","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.20","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.21","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.22","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.23","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2014-0452.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14011","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13098","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2014-0455.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14306","tags":["report"]},{"url":"http://kernelnewbies.org/Linux_3.11","tags":["web"]},{"url":"http://kernelnewbies.org/Linux_3.12","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-7284","tags":["report"]},{"url":"http://secondlookforensics.com/ngro-linux-kernel-bug/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2290-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2394-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2288-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-7284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-1739","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3940","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-4611","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-4943","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-7284","description":"The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.","status":"published","published":"2014-10-13T10:00:00Z","modified":"2024-08-06T12:47:32.648Z","updated_at":"2026-11-02T14:33:46.955592Z"}],"euvd":[{"id":"EUVD-2014-7155","description":"The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.","status":"published","published":"2014-10-13T10:00:00Z","modified":"2024-08-06T12:47:32Z","updated_at":"2026-11-03T01:56:55.992719Z"}],"ghsa":[{"id":"GHSA-qghr-qj2v-qq89","title":"The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x...","description":"The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.","status":"published","published":"2022-05-17T04:31:07Z","modified":"2025-04-12T12:40:36Z","cwes":["CWE-200"],"updated_at":"2026-11-02T15:01:18.899916Z"}],"nvd":[{"id":"CVE-2014-7284","description":"The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.","status":"published","published":"2014-10-13T10:55:08.263Z","modified":"2026-06-17T00:14:41.557Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:56.266125Z"}],"osv":[{"id":"BELL-CVE-2014-7284","title":"CVE-2014-7284 does not affect BellSoft software","status":"withdrawn","published":"2014-10-13T10:55:00Z","modified":"2026-01-28T07:21:27.773851Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2014-7284","description":"The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.","status":"published","published":"2014-10-13T10:55:08Z","modified":"2026-04-16T06:26:15.340356474Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-7284","description":"The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.","status":"published","published":"2014-10-13T10:55:08.263Z","modified":"2026-10-23T15:47:28.512415045Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"MGASA-2014-0451","title":"Updated kernel-linus packages fix security vulnerabilities","description":"This kernel-linus update is based on upstream -longterm 3.14.23 and\nfixes the following security issues:\n\nThe kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux\nkernel through 3.16.1 miscalculates the number of pages during the\nhandling of a mapping failure, which allows guest OS users to (1)\ncause a denial of service (host OS memory corruption) or possibly\nhave unspecified other impact by triggering a large gfn value or\n(2) cause a denial of service (host OS memory consumption) by\ntriggering a small gfn value that leads to permanently pinned\npages (CVE-2014-3601).\n\nThe assoc_array_gc function in the associative-array implementation\nin lib/assoc_array.c in the Linux kernel before 3.16.3 does not\nproperly implement garbage collection, which allows local users to\ncause a denial of service (NULL pointer dereference and system\ncrash) or possibly have unspecified other impact via multiple\n\"keyctl newring\" operations followed by a \"keyctl timeout\"\noperation (CVE-2014-3631).\n\nThe xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the\nxfs implementation in the Linux kernel before 3.14.2 does not properly\ncompare btree hash values, which allows local users to cause a denial\nof service (filesystem corruption, and OOPS or panic) via operations\non directories that have hash collisions, as demonstrated by rmdir\noperations (CVE-2014-7283).\n\nThe net_get_random_once implementation in net/core/utils.c in the\nLinux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors\ndoes not perform the intended slow-path operation to initialize random\nseeds, which makes it easier for remote attackers to spoof or disrupt IP\ncommunication by leveraging the predictability of TCP sequence numbers,\nTCP and UDP port numbers, and IP ID values (CVE-2014-7284)\n\nThe pivot_root implementation in fs/namespace.c in the Linux kernel\nthrough 3.17 does not properly interact with certain locations of\na chroot directory, which allows local users to cause a denial of\nservice (mount-tree loop) via . (dot) values in both arguments to\nthe pivot_root system call (CVE-2014-7970).\n\nThe do_umount function in fs/namespace.c in the Linux kernel \nthrough 3.17 does not require the CAP_SYS_ADMIN capability for\ndo_remount_sb calls that change the root filesystem to read-only,\nwhich allows local users to cause a denial of service (loss of\nwritability) by making certain unshare system calls, clearing the\n/ MNT_LOCKED flag, and making an MNT_FORCE umount system call\n(CVE-2014-7975).\n\nFor other fixes included in this update, read the referenced\nchangelogs.\n","status":"published","published":"2014-11-15T18:31:46Z","modified":"2026-04-16T06:23:13.384146912Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2014-0452","title":"Updated kernel-tmb packages fix security vulnerabilities","description":"This kernel-tmb update is based on upstream -longterm 3.14.23 and\nfixes the following security issues:\n\nThe kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux\nkernel through 3.16.1 miscalculates the number of pages during the\nhandling of a mapping failure, which allows guest OS users to (1)\ncause a denial of service (host OS memory corruption) or possibly\nhave unspecified other impact by triggering a large gfn value or\n(2) cause a denial of service (host OS memory consumption) by\ntriggering a small gfn value that leads to permanently pinned\npages (CVE-2014-3601).\n\nThe assoc_array_gc function in the associative-array implementation\nin lib/assoc_array.c in the Linux kernel before 3.16.3 does not\nproperly implement garbage collection, which allows local users to\ncause a denial of service (NULL pointer dereference and system\ncrash) or possibly have unspecified other impact via multiple\n\"keyctl newring\" operations followed by a \"keyctl timeout\"\noperation (CVE-2014-3631).\n\nThe xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the\nxfs implementation in the Linux kernel before 3.14.2 does not properly\ncompare btree hash values, which allows local users to cause a denial\nof service (filesystem corruption, and OOPS or panic) via operations\non directories that have hash collisions, as demonstrated by rmdir\noperations (CVE-2014-7283).\n\nThe net_get_random_once implementation in net/core/utils.c in the\nLinux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors\ndoes not perform the intended slow-path operation to initialize random\nseeds, which makes it easier for remote attackers to spoof or disrupt IP\ncommunication by leveraging the predictability of TCP sequence numbers,\nTCP and UDP port numbers, and IP ID values (CVE-2014-7284)\n\nThe pivot_root implementation in fs/namespace.c in the Linux kernel\nthrough 3.17 does not properly interact with certain locations of\na chroot directory, which allows local users to cause a denial of\nservice (mount-tree loop) via . (dot) values in both arguments to\nthe pivot_root system call (CVE-2014-7970).\n\nThe do_umount function in fs/namespace.c in the Linux kernel \nthrough 3.17 does not require the CAP_SYS_ADMIN capability for\ndo_remount_sb calls that change the root filesystem to read-only,\nwhich allows local users to cause a denial of service (loss of\nwritability) by making certain unshare system calls, clearing the\n/ MNT_LOCKED flag, and making an MNT_FORCE umount system call\n(CVE-2014-7975).\n\nOther fixes:\nThe X86_SYSFB config option has been disabled as it prevents\nproper KMS setup on some systems (mga#13098)\n\nBFS cpu scheduler has been updated to 0.454.\n\nBFQ io scheduler has been added and set as default.\n\nFor other fixes included in this update, read the referenced\nchangelogs.\n","status":"published","published":"2014-11-15T18:31:46Z","modified":"2026-04-16T06:24:41.891772628Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2014-0455","title":"Updated kernel-vserver packages fix security vulnerabilities","description":"This kernel-vserver update provides an upgrade to the upstream 3.14\n-longterm branch, currently based on 3.14.23 and fixes the following\nsecurity issues:\n\nThe kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux\nkernel through 3.16.1 miscalculates the number of pages during the\nhandling of a mapping failure, which allows guest OS users to (1)\ncause a denial of service (host OS memory corruption) or possibly\nhave unspecified other impact by triggering a large gfn value or\n(2) cause a denial of service (host OS memory consumption) by\ntriggering a small gfn value that leads to permanently pinned\npages (CVE-2014-3601).\n\nThe assoc_array_gc function in the associative-array implementation\nin lib/assoc_array.c in the Linux kernel before 3.16.3 does not\nproperly implement garbage collection, which allows local users to\ncause a denial of service (NULL pointer dereference and system\ncrash) or possibly have unspecified other impact via multiple\n\"keyctl newring\" operations followed by a \"keyctl timeout\"\noperation (CVE-2014-3631).\n\nThe xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the\nxfs implementation in the Linux kernel before 3.14.2 does not properly\ncompare btree hash values, which allows local users to cause a denial\nof service (filesystem corruption, and OOPS or panic) via operations\non directories that have hash collisions, as demonstrated by rmdir\noperations (CVE-2014-7283).\n\nThe net_get_random_once implementation in net/core/utils.c in the\nLinux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors\ndoes not perform the intended slow-path operation to initialize random\nseeds, which makes it easier for remote attackers to spoof or disrupt IP\ncommunication by leveraging the predictability of TCP sequence numbers,\nTCP and UDP port numbers, and IP ID values (CVE-2014-7284)\n\nThe pivot_root implementation in fs/namespace.c in the Linux kernel\nthrough 3.17 does not properly interact with certain locations of\na chroot directory, which allows local users to cause a denial of\nservice (mount-tree loop) via . (dot) values in both arguments to\nthe pivot_root system call (CVE-2014-7970).\n\nThe do_umount function in fs/namespace.c in the Linux kernel \nthrough 3.17 does not require the CAP_SYS_ADMIN capability for\ndo_remount_sb calls that change the root filesystem to read-only,\nwhich allows local users to cause a denial of service (loss of\nwritability) by making certain unshare system calls, clearing the\n/ MNT_LOCKED flag, and making an MNT_FORCE umount system call\n(CVE-2014-7975).\n\nOther fixes:\nThe X86_SYSFB config option has been disabled as it prevents\nproper KMS setup on some systems (mga#13098)\n\nThe vserver patch has been updated to vs2.3.6.13\n\nThe util-vserver userspace tools has been updated to 0.30.216-pre3062\n\nFor other fixes included in this update, read the referenced\nchangelogs.\n","status":"published","published":"2014-11-15T18:31:46Z","modified":"2026-04-16T06:26:08.234213308Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"UBUNTU-CVE-2014-7284","description":"The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.","status":"published","published":"2014-10-13T00:00:00Z","modified":"2026-04-22T09:49:17.499157Z","updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"USN-2290-1","title":"linux vulnerabilities","description":"\nSasha Levin reported a flaw in the Linux kernel's point-to-point protocol\n(PPP) when used with the Layer Two Tunneling Protocol (L2TP). A local user\ncould exploit this flaw to gain administrative privileges. (CVE-2014-4943)\n\nSalva Peiró discovered an information leak in the Linux kernel's media-\ndevice driver. A local attacker could exploit this flaw to obtain sensitive\ninformation from kernel memory. (CVE-2014-1739)\n\nA bounds check error was discovered in the socket filter subsystem of the\nLinux kernel. A local user could exploit this flaw to cause a denial of\nservice (system crash) via crafted BPF instructions. (CVE-2014-3144)\n\nA remainder calculation error was discovered in the socket filter subsystem\nof the Linux kernel. A local user could exploit this flaw to cause a denial\nof service (system crash) via crafted BPF instructions. (CVE-2014-3145)\n\nA flaw was discovered in the Linux kernel's handling of hugetlb entries. A\nlocal user could exploit this flaw to cause a denial service (memory\ncorruption or system crash). (CVE-2014-3940)\n\nDon Bailey and Ludvig Strigeus discovered an integer overflow in the Linux\nkernel's implementation of the LZ4 decompression algorithm, when used by\ncode not complying with API limitations. An attacker could exploit this\nflaw to cause a denial of service (memory corruption) or possibly other\nunspecified impact. (CVE-2014-4611)\n\nTuomas Räsänen reported the Linux kernel on certain Intel processors does\nnot properly initialize random seeds for network operations, causing TCP\nsequence numbers, TCP and UDP port numbers and IP ID values to be\npredictable. A remote attacker could exploit this flaw to spoof or disrupt\nIP communication. (CVE-2014-7284)\n","status":"published","published":"2014-07-17T01:33:01Z","modified":"2026-04-22T08:57:54.380862Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}