CVE-2014-3940

Updated: 2023-11-24

CWE: Race Conditions

Description:

The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numa_maps read operations during hugepage migration, related to fs/proc/task_mmu.c and mm/mempolicy.c.

CVSS3:

Vendor State

OS	Vendor version	Errata
Ubuntu 14.04	3.13.0-32.57	USN-2290-1
Ubuntu 14.04 ESM	3.13.0-32.57	USN-2290-1
RHEL 7	3.10.0-229.el7	RHSA-2015:0290
CentOS 6 plus	2.6.32-573.el6.centos.plus	CESA-2015:1272
RHEL 6	2.6.32-573.el6	RHSA-2015:1272
CentOS 7 plus	3.10.0-229.el7.centos.plus	CESA-2015:0290
CentOS 7	3.10.0-229.el7	CESA-2015:0290
Oracle Linux 6	2.6.32-573.el6	ELSA-2015-1272
Oracle Linux 7	3.10.0-229.el7	ELSA-2015-0290
Scientific 6	2.6.32-573.el6	CESA-2015:1272
CentOS 6	2.6.32-573.el6	CESA-2015:1272

KernelCare State

OS	Original kernel version	State
Ubuntu 14.04		Ready For Release
OEL 6 Dell		Ready For Release
Endurance 7 eig 3.10		Ready For Release
Debian 10 cloud		Will Not Fix
Debian 9 backports		Will Not Fix
Ubuntu 14.04 ESM		Ready For Release
OEL 7 Dell		Ready For Release
CloudLinux OS 7	3.10.0-233.1.2.lve1.3.33.4.el7 show all hide all 3.10.0-223.1.2.lve1.3.22.el7 3.10.0-223.1.2.lve1.3.33.3.el7 3.10.0-223.1.2.lve1.3.33.el7 3.10.0-233.1.2.lve1.3.33.1.el7	Released
RHEL 7	3.10.0-123.8.1.el7 show all hide all 3.10.0-123.13.1.el7 3.10.0-123.6.3.el7 3.10.0-123.13.2.el7 3.10.0-123.20.1.el7 3.10.0-123.4.2.el7 3.10.0-123.1.2.el7 3.10.0-123.9.2.el7 3.10.0-123.9.3.el7 3.10.0-123.el7 3.10.0-123.4.4.el7	Released
CentOS 6 plus	2.6.32-431.1.2.el6.centos.plus show all hide all 2.6.32-431.5.1.el6.centos.plus 2.6.32-358.0.1.el6.centos.plus 2.6.32-504.3.3.el6.centos.plus 2.6.32-504.16.2.el6.centos.plus 2.6.32-504.1.3.el6.centos.plus 2.6.32-504.12.2.el6.centos.plus 2.6.32-504.8.1.el6.centos.plus 2.6.32-431.20.3.el6.centos.plus 2.6.32-279.19.1.el6.centos.plus 2.6.32-431.17.1.el6.centos.plus 2.6.32-431.11.2.el6.centos.plus 2.6.32-358.6.1.el6.centos.plus 2.6.32-358.14.1.el6.centos.plus 2.6.32-431.el6.centos.plus 2.6.32-431.20.5.el6.centos.plus 2.6.32-504.23.4.el6.centos.plus 2.6.32-279.9.1.el6.centos.plus 2.6.32-358.23.2.el6.centos.plus 2.6.32-279.11.1.el6.centos.plus 2.6.32-504.el6.centos.plus 2.6.32-431.29.2.el6.centos.plus 2.6.32-279.22.1.el6.centos.plus 2.6.32-358.2.1.el6.centos.plus 2.6.32-431.23.3.el6.centos.plus 2.6.32-279.2.1.el6.centos.plus 2.6.32-279.5.1.el6.centos.plus 2.6.32-431.3.1.el6.centos.plus 2.6.32-279.5.2.el6.centos.plus 2.6.32-431.20.3.0.1.el6.centos.plus 2.6.32-358.6.2.el6.centos.plus 2.6.32-358.11.1.el6.centos.plus 2.6.32-358.el6.centos.plus 2.6.32-504.30.3.el6.centos.plus 2.6.32-279.14.1.el6.centos.plus 2.6.32-358.18.1.el6.centos.plus	Released
RHEL 6	2.6.32-431.1.2.el6 show all hide all 2.6.32-431.11.2.el6 2.6.32-431.29.2.el6 2.6.32-504.12.2.el6 2.6.32-504.16.2.el6 2.6.32-279.11.1.el6 2.6.32-279.14.1.el6 2.6.32-279.19.1.el6 2.6.32-279.2.1.el6 2.6.32-279.22.1.el6 2.6.32-279.5.1.el6 2.6.32-279.5.2.el6 2.6.32-279.9.1.el6 2.6.32-358.0.1.el6 2.6.32-358.11.1.el6 2.6.32-358.14.1.el6 2.6.32-358.18.1.el6 2.6.32-358.2.1.el6 2.6.32-358.23.2.el6 2.6.32-358.6.1.el6 2.6.32-358.6.2.el6 2.6.32-358.el6 2.6.32-431.17.1.el6 2.6.32-431.20.3.el6 2.6.32-431.20.5.el6 2.6.32-431.23.3.el6 2.6.32-431.3.1.el6 2.6.32-431.5.1.el6 2.6.32-431.el6 2.6.32-504.1.3.el6 2.6.32-504.23.4.el6 2.6.32-504.3.3.el6 2.6.32-504.30.3.el6 2.6.32-504.8.1.el6 2.6.32-504.el6	Released
CentOS 7 plus	3.10.0-123.8.1.el7.centos.plus show all hide all 3.10.0-123.6.3.el7.centos.plus 3.10.0-123.4.4.el7.centos.plus 3.10.0-123.13.2.el7.centos.plus 3.10.0-123.9.2.el7.centos.plus 3.10.0-123.20.1.el7.centos.plus 3.10.0-123.13.1.el7.centos.plus 3.10.0-123.9.3.el7.centos.plus 3.10.0-123.el7.centos.plus 3.10.0-123.1.2.el7.centos.plus 3.10.0-123.4.2.el7.centos.plus	Released
CentOS 7	3.10.0-123.1.2.el7 show all hide all 3.10.0-123.4.2.el7 3.10.0-123.6.3.el7 3.10.0-123.13.1.el7 3.10.0-123.8.1.el7 3.10.0-123.9.2.el7 3.10.0-123.13.2.el7 3.10.0-123.9.3.el7 3.10.0-123.el7 3.10.0-123.4.4.el7 3.10.0-123.20.1.el7	Released
Oracle Linux 6	2.6.32-504.3.3.el6 show all hide all 2.6.32-358.14.1.el6 2.6.32-358.11.1.el6 2.6.32-504.23.4.el6 2.6.32-504.16.2.el6 2.6.32-504.30.3.el6 2.6.32-358.0.1.el6 2.6.32-431.20.5.el6 2.6.32-431.29.2.el6 2.6.32-431.1.2.el6 2.6.32-431.el6 2.6.32-358.6.2.el6 2.6.32-358.2.1.el6 2.6.32-504.el6 2.6.32-279.19.1.el6 2.6.32-358.6.1.el6 2.6.32-279.11.1.el6 2.6.32-431.17.1.el6 2.6.32-431.23.3.el6 2.6.32-431.11.2.el6 2.6.32-279.5.1.el6 2.6.32-279.2.1.el6 2.6.32-279.5.2.el6 2.6.32-431.3.1.el6 2.6.32-358.23.2.el6 2.6.32-504.8.1.el6 2.6.32-504.1.3.el6 2.6.32-279.9.1.el6 2.6.32-279.22.1.el6 2.6.32-358.el6 2.6.32-431.20.3.el6 2.6.32-358.18.1.el6 2.6.32-431.5.1.el6 2.6.32-504.12.2.el6 2.6.32-279.14.1.el6	Released
CloudLinux OS 6	2.6.32-379.22.1.lve1.2.17.1.el6 show all hide all 2.6.32-379.22.1.lve1.2.17.el6 2.6.32-458.18.1.lve1.2.39.el6 2.6.32-458.23.2.lve1.2.45.el6 2.6.32-458.23.2.lve1.2.48.el6 2.6.32-458.23.2.lve1.2.52.el6 2.6.32-458.6.2.lve1.2.26.1.el6 2.6.32-458.6.2.lve1.2.28.el6 2.6.32-458.6.2.lve1.2.30.el6 2.6.32-531.1.2.lve1.2.54.el6 2.6.32-531.11.2.lve1.2.55.el6 2.6.32-531.17.1.lve1.2.56.el6 2.6.32-531.17.1.lve1.2.57.el6 2.6.32-531.17.1.lve1.2.58.el6 2.6.32-531.17.1.lve1.2.60.el6 2.6.32-531.23.3.lve1.2.65.el6 2.6.32-531.23.3.lve1.2.66.el6 2.6.32-531.23.3.lve1.3.6.el6 2.6.32-531.29.2.lve1.3.11.1.el6 2.6.32-531.29.2.lve1.3.11.10.el6	Released
OpenVZ 6	2.6.32-042stab076.7 show all hide all 2.6.32-042stab076.8 2.6.32-042stab078.22 2.6.32-042stab078.26 2.6.32-042stab078.27 2.6.32-042stab078.28 2.6.32-042stab079.4 2.6.32-042stab079.5 2.6.32-042stab079.6 2.6.32-042stab081.3 2.6.32-042stab081.5 2.6.32-042stab081.8 2.6.32-042stab083.2 2.6.32-042stab084.12 2.6.32-042stab084.14 2.6.32-042stab084.17 2.6.32-042stab084.20 2.6.32-042stab084.21 2.6.32-042stab084.25 2.6.32-042stab084.26 2.6.32-042stab085.17 2.6.32-042stab085.20 2.6.32-042stab088.4 2.6.32-042stab090.2 2.6.32-042stab090.3 2.6.32-042stab090.4 2.6.32-042stab090.5 2.6.32-042stab092.1 2.6.32-042stab092.2 2.6.32-042stab092.3 2.6.32-042stab093.4 2.6.32-042stab093.5 2.6.32-042stab094.7 2.6.32-042stab094.8 2.6.32-042stab102.9 2.6.32-042stab103.6 2.6.32-042stab104.1 2.6.32-042stab105.14 2.6.32-042stab106.4 2.6.32-042stab106.6 2.6.32-042stab108.1 2.6.32-042stab108.2 2.6.32-042stab108.5 2.6.32-042stab108.6 2.6.32-042stab108.7	Released
Oracle Linux 7	3.10.0-123.9.3.el7 show all hide all 3.10.0-123.20.1.el7 3.10.0-123.13.1.el7 3.10.0-123.13.2.el7 3.10.0-123.4.4.el7 3.10.0-123.6.3.el7 3.10.0-123.4.2.el7 3.10.0-123.el7 3.10.0-123.8.1.el7 3.10.0-123.9.2.el7 3.10.0-123.1.2.el7	Released
Scientific 6	2.6.32-279.2.1.el6 show all hide all 2.6.32-279.5.1.el6 2.6.32-504.23.4.el6 2.6.32-358.2.1.el6 2.6.32-431.20.3.el6 2.6.32-358.23.2.el6 2.6.32-504.el6 2.6.32-358.18.1.el6 2.6.32-504.3.3.el6 2.6.32-431.1.2.el6 2.6.32-431.20.5.el6 2.6.32-504.12.2.el6 2.6.32-431.11.2.el6 2.6.32-279.14.1.el6 2.6.32-504.16.2.el6 2.6.32-504.30.3.el6 2.6.32-431.el6 2.6.32-431.29.2.el6 2.6.32-504.8.1.el6 2.6.32-279.5.2.el6 2.6.32-431.3.1.el6 2.6.32-279.22.1.el6 2.6.32-358.11.1.el6 2.6.32-358.6.2.el6 2.6.32-279.19.1.el6 2.6.32-431.23.3.el6 2.6.32-431.5.1.el6 2.6.32-504.1.3.el6 2.6.32-279.9.1.el6 2.6.32-431.17.1.el6 2.6.32-358.14.1.el6 2.6.32-279.11.1.el6 2.6.32-358.el6 2.6.32-358.0.1.el6 2.6.32-358.6.1.el6	Released
CentOS 6	2.6.32-279.14.1.el6 show all hide all 2.6.32-358.2.1.el6 2.6.32-358.23.2.el6 2.6.32-358.0.1.el6 2.6.32-431.11.2.el6 2.6.32-504.8.1.el6 2.6.32-504.3.3.el6 2.6.32-504.1.3.el6 2.6.32-431.el6 2.6.32-358.6.2.el6 2.6.32-358.6.1.el6 2.6.32-504.23.4.el6 2.6.32-358.14.1.el6 2.6.32-279.9.1.el6 2.6.32-279.11.1.el6 2.6.32-358.11.1.el6 2.6.32-431.23.3.el6 2.6.32-431.5.1.el6 2.6.32-504.12.2.el6 2.6.32-431.20.5.el6 2.6.32-279.22.1.el6 2.6.32-504.el6 2.6.32-431.20.3.el6 2.6.32-504.30.3.el6 2.6.32-358.el6 2.6.32-279.5.1.el6 2.6.32-279.5.2.el6 2.6.32-431.3.1.el6 2.6.32-279.2.1.el6 2.6.32-431.1.2.0.1.el6 2.6.32-504.16.2.el6 2.6.32-431.17.1.el6 2.6.32-358.18.1.el6 2.6.32-279.19.1.el6 2.6.32-431.29.2.el6	Released