CVE-2014-0181: Linux Kernel

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local users to bypass intended access restrictions and modify network configurations by using a Netlink socket for the (1) stdout or (2) stderr of a setuid program.

Affected products

• Linux Linux Kernel: up to and including 3.14.1
• Opensuse Evergreen: version 11.4 only
• Red Hat Enterprise Linux Desktop: version 5 only
• Red Hat Enterprise Linux Server: version 5.0 only
• Suse Linux Enterprise Real Time Extension: version 11 only
• Suse Linux Enterprise Server: version 10 only; version 11 only
• Suse Suse Linux Enterprise Server: version 11 only

Published 2014-04-27. Last modified 2026-06-17.