CVE-2014-7825: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service (out-of-bounds read and OOPS) or bypass the ASLR protection mechanism via a crafted application.

Affected products

• Linux Linux Kernel: from 2.6.32, before 3.2.65 (fixed in 3.2.65); from 3.3, before 3.4.106 (fixed in 3.4.106); from 3.5, before 3.10.60 (fixed in 3.10.60); from 3.11, before 3.12.33 (fixed in 3.12.33); from 3.13, before 3.14.24 (fixed in 3.14.24); from 3.15, before 3.16.35 (fixed in 3.16.35); …

Published 2014-11-10. Last modified 2026-06-17.