CVE-2014-8709: Linux Kernel

Medium severity, CVSS 5.0. EPSS: 4.5% chance of exploitation in the next 30 days.

The ieee80211_fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, which allows remote attackers to obtain sensitive cleartext information by reading packets.

Affected products

• Linux Linux Kernel: up to and including 3.13.4; version 3.13 only; version 3.13.1 only; version 3.13.2 only; version 3.13.3 only

Published 2014-11-10. Last modified 2026-06-17.