Description
Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.
References (8)
Core 8
Core References
Exploit, Third Party Advisory mailing-list
x_refsource_mlist
https://lkml.org/lkml/2014/3/20/421
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1079012
Third Party Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2240-1
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/66348
Broken Link third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/59599
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/91922
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
http://seclists.org/oss-sec/2014/q1/627
Mailing List, Patch, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/03/20/16
Scores
EPSS
0.0101
EPSS Percentile
59.1%
Details
CWE
CWE-416
Status
published
Products (2)
canonical/ubuntu_linux
14.04
linux/linux_kernel
3.0 - 3.13.6
Published
Mar 24, 2014
Tracked Since
Feb 18, 2026