CVE-2014-0069: Linux Kernel

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.

Affected products

• Linux Linux Kernel: before 3.2.57 (fixed in 3.2.57); from 3.3, before 3.4.83 (fixed in 3.4.83); from 3.5, before 3.10.33 (fixed in 3.10.33); from 3.11, before 3.12.14 (fixed in 3.12.14); from 3.13, before 3.13.6 (fixed in 3.13.6)
• Red Hat Enterprise Linux Desktop: version 6.0 only
• Red Hat Enterprise Linux Eus: version 6.5 only
• Red Hat Enterprise Linux Server: version 6.0 only
• Red Hat Enterprise Linux Server Aus: version 6.5 only
• Red Hat Enterprise Linux Server Tus: version 6.5 only
• Red Hat Enterprise Linux Workstation: version 6.0 only
• Suse Linux Enterprise Desktop: version 11 only
• Suse Linux Enterprise Server: version 11 only

Published 2014-02-28. Last modified 2026-06-17.