CVE-2014-2889
N/A
Published: April 27, 2014 at 12:00 AM UTC
Updated: June 17, 2026 at 12:07 AM UTC
1 product affected across 1 vendorLinux Kernel
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.4%
Description
Off-by-one error in the bpf_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges via a long jump after a conditional jump.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 3.1.73.0 rc13.0 rc23.0 rc33.0 rc43.0 rc53.0 rc63.0 rc73.0.13.0.103.0.113.0.123.0.133.0.143.0.153.0.163.0.173.0.183.0.193.0.23.0.203.0.213.0.223.0.233.0.243.0.253.0.263.0.273.0.283.0.293.0.33.0.303.0.313.0.323.0.333.0.343.0.353.0.363.0.373.0.383.0.393.0.43.0.403.0.413.0.423.0.433.0.443.0.453.0.463.0.473.0.483.0.493.0.53.0.503.0.513.0.523.0.533.0.543.0.553.0.563.0.573.0.583.0.593.0.63.0.603.0.613.0.623.0.633.0.643.0.653.0.663.0.673.0.683.0.73.0.83.0.93.13.1 rc13.1 rc23.1 rc33.1 rc43.1.13.1.23.1.33.1.43.1.53.1.6
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (4)
x_refsource_CONFIRM
Source: [email protected]
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8Mailing Listx_refsource_MLIST
Source: [email protected]
http://www.openwall.com/lists/oss-security/2014/04/18/6x_refsource_CONFIRM
Source: [email protected]
https://github.com/torvalds/linux/commit/a03ffcf873fe0f2565386ca8ef832144c42e67faQuick Info
StatusMODIFIED
CWE
CWE-189
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card