CVE-2014-3153
HIGH KEV RANSOMWARELinux Kernel <=3.14.5 - Privilege Escalation
Title source: llmExploitation Summary
CVE-2014-3153 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added May 25, 2022, with confirmed use in ransomware campaigns.
EIP tracks 11 public exploits from researchers including Kaiqu Chen, timwr, geekben, including a Metasploit module exploits/android/local/futex_requeue.
AI-analyzed exploit summary This exploit leverages CVE-2014-3153, a futex-related vulnerability in the Linux kernel, to achieve local privilege escalation (LPE) on RHEL/CentOS 7.0.1406. It manipulates kernel structures to overwrite credentials and gain root access.
Description
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.
Exploits (11)
This exploit leverages CVE-2014-3153, a futex-related vulnerability in the Linux kernel, to achieve local privilege escalation (LPE) on RHEL/CentOS 7.0.1406. It manipulates kernel structures to overwrite credentials and gain root access.
This is a working proof-of-concept exploit for CVE-2014-3153, a futex-based local privilege escalation vulnerability in the Linux kernel. The exploit leverages futex requeue operations to achieve arbitrary kernel memory writes, ultimately executing shellcode with root privileges.
This is a working proof-of-concept exploit for CVE-2014-3153, a Linux kernel vulnerability that allows local privilege escalation. The exploit manipulates kernel memory via futex operations to gain root privileges.
This exploit targets CVE-2024-3153, a futex-related vulnerability in the Linux kernel, to achieve local privilege escalation (LPE) on Android devices. It manipulates futex operations and thread priorities to corrupt kernel memory and gain root access.
This is a working privilege escalation exploit for CVE-2014-3153, targeting Linux kernels up to 3.14. It leverages a futex race condition to gain root privileges by manipulating kernel memory structures.
This repository contains a working proof-of-concept exploit for CVE-2014-3153, a Linux kernel vulnerability affecting Android devices. The exploit leverages a futex-related race condition to achieve local privilege escalation (LPE) by modifying kernel memory structures to grant root access.
This repository contains a working proof-of-concept exploit for CVE-2014-3153, a futex-related vulnerability in the Linux kernel. It includes code to trigger a kernel crash and achieve local privilege escalation by manipulating futex operations and kernel memory structures.
This repository contains a proof-of-concept exploit for CVE-2014-3153, a futex-related vulnerability in the Linux kernel. The exploit demonstrates a denial-of-service (DoS) and privilege escalation via kernel arbitrary read/write, targeting ARM and x86 systems with kernel versions <= 3.14.5.
This repository contains a proof-of-concept exploit for CVE-2024-3153, a Linux kernel vulnerability allowing local privilege escalation via futex manipulation. The code includes multiple modules for injecting and executing arbitrary code in kernel space.
This exploit targets CVE-2014-3153, a futex-based privilege escalation vulnerability in the Linux kernel. It manipulates futex operations to corrupt kernel memory, ultimately achieving local privilege escalation by overwriting the `addr_limit` field in the thread_info structure.
This Metasploit module exploits CVE-2014-3153, a futex_requeue vulnerability in Linux kernels before June 2014, to achieve local privilege escalation on Android devices. It dynamically targets specific device models and injects a payload to gain root access.
References (40)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H