CVE-2014-3940 in Red Hat and Linux Products
Published on June 5, 2014
The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system crash) by accessing certain memory locations, as demonstrated by triggering a race condition via numa_maps read operations during hugepage migration, related to fs/proc/task_mmu.c and mm/mempolicy.c.
Products Associated with CVE-2014-3940
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2014-3940 are published in these products:
Exploit Probability
EPSS
0.04%
Percentile
12.60%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.