CVE-2014-4027
No CVSS score yet. EPSS 0.7% chance of exploitation in the next 30 days.
The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- f5:big-ip_access_policy_manager
- f5:big-ip_advanced_firewall_manager
- f5:big-ip_analytics
- f5:big-ip_application_acceleration_manager
- f5:big-ip_application_security_manager
- f5:big-ip_domain_name_system
- f5:big-ip_edge_gateway
- f5:big-ip_global_traffic_manager
- f5:big-ip_link_controller
- f5:big-ip_local_traffic_manager
- f5:big-ip_policy_enforcement_manager
- f5:big-ip_protocol_security_module
- f5:big-ip_wan_optimization_manager
- f5:big-ip_webaccelerator
- f5:big-iq_application_delivery_controller
- f5:big-iq_cloud
- f5:big-iq_device
- f5:big-iq_security
- f5:enterprise_manager
- linux:linux_kernel
- redhat:enterprise_linux
- suse:linux_enterprise_desktop
- suse:linux_enterprise_high_availability_extension
- suse:linux_enterprise_real_time_extension
- suse:linux_enterprise_server
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
- http://permalink.gmane.org/gmane.linux.scsi.target.devel/6618
- http://secunia.com/advisories/59134