Vulnetix
Try Vulnetix Request Demo
CVE-2014-9644 PUBLISHED

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421.

EPSS 0.05% · 16.0th percentile

Risk Scores

EPSS Score
0.05%
16.0th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlinux-lts-utopic0, 3.16.0-25.33~14.04.2, 3.16.0-26.35~14.04.1
Ubuntu:14.04:LTSlinux3.12.0-5.13, 3.12.0-7.15, 3.13.0-1.16

Timeline

References

Open in Interactive Console →