CVE-2014-0038
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges...
- Published
- Feb 6, 2014
- Updated
- Aug 6, 2024
- Assigning CNA
- redhat
- Evidence observed
- Jan 31, 2014
Primary CVSS
nvd · CVSS 2.0
AV:L/AC:M/Au:N/C:C/I:C/A:CModerate · next 30 days
- Percentile
- 98.4%
- Model date
- Oct 14, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.
Sources
modules/exploits/linux/local/recvmmsg_priv_esc.rb
Metasploit Framework modulesDeclared conditions
- platform: Linux($.exploit_linux/local/recvmmsg_priv_esc.platform)
- verification: check_declared($.exploit_linux/local/recvmmsg_priv_esc.check)
- cve-2014-0038Exploit
Linux local root exploit for CVE-2014-0038
- IT19115276Research
SNP Assignment 1 Report - Linux box exploitation ( Vulnerability CVE-2014-0038)
- LinuxEelvationExploit
Linux Eelvation(持续更新)
- linux-kernel-exploitsExploit
linux-kernel-exploits Linux平台提权漏洞集合
Kees Cook · linux · Jan 31, 2014
saelo · linux · Feb 2, 2014
rebel · linux_x86-64 · Feb 2, 2014
Metasploit · linux · Oct 11, 2016
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.