{
    "id": "CVE-2014-0038",
    "published": "2014-02-06 22:55:03",
    "last_modified": "2026-06-17 00:02:08",
    "cvss_score": "6.9",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
    "cwe": "CWE-20",
    "description": "The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.",
    "epss_score": "0.35451",
    "epss_percentile": "0.98401",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-26 18:19:12",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "linux",
            "product": "linux_kernel"
        },
        {
            "vendor": "opensuse",
            "product": "opensuse"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "40503",
            "title": "Linux Kernel 3.13.1 - 'Recvmmsg' Local Privilege Escalation (Metasploit)",
            "date": "2016-10-11",
            "url": "https://www.exploit-db.com/exploits/40503"
        },
        {
            "source": "exploit-db",
            "ref_id": "31346",
            "title": "Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.10) - 'CONFIG_X86_X32' Arbitrary Write (2)",
            "date": "2014-02-02",
            "url": "https://www.exploit-db.com/exploits/31346"
        },
        {
            "source": "exploit-db",
            "ref_id": "31347",
            "title": "Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.04/13.10 x64) - 'CONFIG_X86_X32=y' Local Privilege Escalation (3)",
            "date": "2014-02-02",
            "url": "https://www.exploit-db.com/exploits/31347"
        },
        {
            "source": "exploit-db",
            "ref_id": "31305",
            "title": "Linux Kernel 3.4 < 3.13.2 - recvmmsg x32 compat (PoC)",
            "date": "2014-01-31",
            "url": "https://www.exploit-db.com/exploits/31305"
        }
    ],
    "refs_list": [
        "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2def2ef2ae5f3990aabdbe8a755911902707d268",
        "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html",
        "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html",
        "http://pastebin.com/raw.php?i=DH3Lbg54",
        "http://secunia.com/advisories/56669",
        "http://www.exploit-db.com/exploits/31346",
        "http://www.exploit-db.com/exploits/31347",
        "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.2",
        "http://www.mandriva.com/security/advisories?name=MDVSA-2014:038",
        "http://www.openwall.com/lists/oss-security/2014/01/31/2",
        "http://www.securityfocus.com/bid/65255",
        "http://www.ubuntu.com/usn/USN-2094-1",
        "http://www.ubuntu.com/usn/USN-2095-1",
        "http://www.ubuntu.com/usn/USN-2096-1",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1060023",
        "https://code.google.com/p/chromium/issues/detail?id=338594",
        "https://github.com/saelo/cve-2014-0038",
        "https://github.com/torvalds/linux/commit/2def2ef2ae5f3990aabdbe8a755911902707d268",
        "https://www.exploit-db.com/exploits/40503/",
        "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2def2ef2ae5f3990aabdbe8a755911902707d268",
        "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html",
        "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html",
        "http://pastebin.com/raw.php?i=DH3Lbg54",
        "http://secunia.com/advisories/56669",
        "http://www.exploit-db.com/exploits/31346"
    ]
}