CVE-2014-0131

LowCVSS 2.9/10Last modified Jun 17, 2026

Description

Use-after-free vulnerability in the skb_segment function in net/core/skbuff.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation.

Metrics

CVSS 2.0 2.9/10AV:A/AC:M/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1fd819ecb90cc9b822cd84d3056ddba315d3340f
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/03/10/4Mailing List, Third Party Advisory
http://www.spinics.net/lists/netdev/msg274250.htmlMailing List, Third Party Advisory
http://www.spinics.net/lists/netdev/msg274316.htmlMailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1074589Issue Tracking
https://github.com/torvalds/linux/commit/1fd819ecb90cc9b822cd84d3056ddba315d3340fPatch, Vendor Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1fd819ecb90cc9b822cd84d3056ddba315d3340f
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/03/10/4Mailing List, Third Party Advisory
http://www.spinics.net/lists/netdev/msg274250.htmlMailing List, Third Party Advisory
http://www.spinics.net/lists/netdev/msg274316.htmlMailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1074589Issue Tracking
https://github.com/torvalds/linux/commit/1fd819ecb90cc9b822cd84d3056ddba315d3340fPatch, Vendor Advisory

Timeline

Published: Mar 24, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-01326.5The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary CVE-2014-01337.5Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execut CVE-2014-01343.5The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images a CVE-2014-01351.9Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local u CVE-2014-01365.0The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote attackers to inse CVE-2014-01376.5SQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat CloudForms Management Engine (CFME) before CVE-2014-01386.4The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) CVE-2014-01395.8cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the CVE-2014-01404.0Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to access sensitive controllers and actions via CVE-2014-01416.1Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3.CVE-2014-01425.5QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tr CVE-2014-01437.0Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a