CVE-2014-2889: Linux Kernel

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Off-by-one error in the bpf_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges via a long jump after a conditional jump.

Affected products

• Linux Linux Kernel: up to and including 3.1.7; version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; …

Published 2014-04-27. Last modified 2026-06-17.