CVE-2014-2038

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
2.1
LOW
Affected
1
PROJECT

Description

The nfs_can_extend_write function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a write delegation to extend a write operation without a certain up-to-date verification, which allows local users to obtain sensitive information from kernel memory in opportunistic circumstances by writing to a file in an NFS filesystem and then reading the same file.

Linux kernel source tree
GitHubGitHub
237K