$ cve CVE-2014-0038 JSON

CVE-2014-0038 EXPLOIT

6.9

MEDIUM · CVSS 2.0 · EPSS 35.5% (pctl 98)

Patch early

A public exploit exists.

Description

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.

Scoring

CVSS	6.9 (MEDIUM, v2.0)
Vector	AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS	35.45% — more likely to be exploited than 98% of all CVEs
Weakness	CWE-20
On CISA KEV	no
Public exploit	yes
Published	2014-02-06
Last modified	2026-06-17

Affected (2)

Vendor	Product
linux	linux kernel
opensuse	opensuse

Public exploits

Source	Title	Date
exploit-db	Linux Kernel 3.13.1 - 'Recvmmsg' Local Privilege Escalation (Metasploit)	2016-10-11
exploit-db	Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.10) - 'CONFIG_X86_X32' Arbitrary Write (2)	2014-02-02
exploit-db	Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.04/13.10 x64) - 'CONFIG_X86_X32=y' Local Privilege Escalation (3)	2014-02-02
exploit-db	Linux Kernel 3.4 < 3.13.2 - recvmmsg x32 compat (PoC)	2014-01-31

References

→ the Explorer · watch your stack · NVD