Linux · Kernel
CVE-2014-0196
Linux Kernel Race Condition Vulnerability
What it is
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
CISA: Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.
What to do
The impacted product is end-of-life and should be disconnected if still in use.
Deadline for US federal agencies: June 2, 2023
- Added to the CISA list
- May 12, 2023
- Published
- May 7, 2014
- Severity
- Medium 5.5 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 20% in the top 2.5% of all known vulnerabilities
- Weakness
- CWE-362
- More details
- NVD · CVE.org · CISA
All references (20)
- http://www.ubuntu.com/usn/USN-2203-1
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html
- http://www.ubuntu.com/usn/USN-2204-1
- http://www.ubuntu.com/usn/USN-2202-1
- http://www.debian.org/security/2014/dsa-2928
- http://www.ubuntu.com/usn/USN-2199-1
- http://www.ubuntu.com/usn/USN-2197-1
- http://rhn.redhat.com/errata/RHSA-2014-0512.html
- http://www.debian.org/security/2014/dsa-2926
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html
- http://www.osvdb.org/106646
- http://www.openwall.com/lists/oss-security/2014/05/05/6
- http://secunia.com/advisories/59262
- http://secunia.com/advisories/59218
- http://www.exploit-db.com/exploits/33516
- http://linux.oracle.com/errata/ELSA-2014-0771.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1094232
- http://source.android.com/security/bulletin/2016-07-01.html
- http://secunia.com/advisories/59599
- https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00
More exploited flaws from Linux
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 18, 2026 | Improper Check for Unusual or Exceptional Conditions | Kernel | Critical 9.8 | 3.3% |
| Sep 18, 2026 | Race Condition | Kernel | High 7.8 | 1.6% |
| Sep 18, 2026 | Out-of-Bounds Write | Kernel | High 8.8 | 0.9% |
| Aug 27, 2026 | Unspecified | Kernel | High 7.8 | 0.7% |
| Aug 26, 2026 | Out-of-Bounds Write | Kernel | High 7.8 | 8.9% |
| Jun 2, 2026 | Improper Authentication | Kernel | High 7.8 | 5.5% |
| May 1, 2026 | Incorrect Resource Transfer Between Spheres | Kernel | High 7.8 | 98% |
| Jan 26, 2026 | Integer Overflow | Kernel | High 7.8 | 15% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.