Linux Kernel CVE-2014-3631 Local Denial of Service Vulnerability

Bugtraq ID:	70095
Class:	Design Error
CVE:	CVE-2014-3631
Remote:	No
Local:	Yes
Published:	Sep 24 2014 12:00AM
Updated:	May 07 2015 05:23PM
Credit:	David Howells
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.3.2 Linux kernel 3.2.13 Linux kernel 3.2.9 Linux kernel 3.2.1 Linux kernel 3.2.2
Not Vulnerable:

Linux Kernel CVE-2014-3631 Local Denial of Service Vulnerability

The Linux kernel is prone to a local denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected system, denying service to legitimate users.

Linux Kernel CVE-2014-3631 Local Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/70095.c

Linux Kernel CVE-2014-3631 Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Linux Kernel CVE-2014-3631 Local Denial of Service Vulnerability

References:

• CVE-2014-3631 BUG: unable to handle kernel NULL pointer dereference at 000000000 (Red Hat)
  
• KEYS: Fix termination condition in assoc array garbage collection (kernel.org)
  
• Linux kernel Homepage (kernel.org)
  
• Multiple Vulnerabilities (Pexip)