VIR Vulnerability Intelligence Relay

CVE-2014-4027

low
Published 2014-06-23 · Modified 2026-05-06
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
2.3

Description

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

OS impact
linux Linux kernel Affected 1 release
VersionStatusFixed in
— Affected 3.14
redhat Red Hat Affected 1 release
VersionStatusFixed in
6.0 Affected —
suse SUSE Affected 1 release
VersionStatusFixed in
11 Affected —
ubuntu Ubuntu Affected 1 release
VersionStatusFixed in
12.04 Affected —
debian Debian Fixed 5 releases
VersionStatusFixed in
trixie Fixed 3.14.2-1
sid Fixed 3.14.2-1
forky Fixed 3.14.2-1
bullseye Fixed 3.14.2-1
bookworm Fixed 3.14.2-1

Application impact
VendorProductVersionsFixed
f5big-ip_access_policy_manager{"startIncluding":"11.1.0","endIncluding":"11.6.0"}
f5big-ip_access_policy_manager12.0.0
f5big-ip_advanced_firewall_manager{"startIncluding":"11.3.0","endIncluding":"11.6.0"}
f5big-ip_advanced_firewall_manager12.0.0
f5big-ip_analytics{"startIncluding":"11.1.0","endIncluding":"11.6.0"}
f5big-ip_analytics12.0.0
f5big-ip_application_acceleration_manager{"startIncluding":"11.4.0","endIncluding":"11.6.0"}
f5big-ip_application_acceleration_manager12.0.0
f5big-ip_application_security_manager{"startIncluding":"11.1.0","endIncluding":"11.6.0"}
f5big-ip_application_security_manager12.0.0
f5big-ip_domain_name_system12.0.0
f5big-ip_edge_gateway{"startIncluding":"11.1.0","endIncluding":"11.3.0"}
f5big-ip_global_traffic_manager{"startIncluding":"11.1.0","endIncluding":"11.6.0"}
f5big-ip_link_controller{"startIncluding":"11.1.0","endIncluding":"11.6.0"}
f5big-ip_link_controller12.0.0
f5big-ip_local_traffic_manager{"startIncluding":"11.1.0","endIncluding":"11.6.0"}
f5big-ip_local_traffic_manager12.0.0
f5big-ip_policy_enforcement_manager{"startIncluding":"11.3.0","endIncluding":"11.6.0"}
f5big-ip_policy_enforcement_manager12.0.0
f5big-ip_protocol_security_module{"startIncluding":"11.1.0","endIncluding":"11.4.1"}
f5big-ip_wan_optimization_manager{"startIncluding":"11.1.0","endIncluding":"11.3.0"}
f5big-ip_webaccelerator{"startIncluding":"11.1.0","endIncluding":"11.3.0"}
f5big-iq_application_delivery_controller4.5.0
f5big-iq_cloud{"startIncluding":"4.0.0","endIncluding":"4.5.0"}
f5big-iq_device{"startIncluding":"4.2.0","endIncluding":"4.5.0"}
f5big-iq_security{"startIncluding":"4.0.0","endIncluding":"4.5.0"}
f5enterprise_manager{"startIncluding":"3.0.0","endIncluding":"3.1.1"}

References

CWEs

CWE-200

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.