elongl/CVE-2014-3153

elongl/CVE-2014-3153

GitHubGitHub
GitHubgithub.com
elongl.github.ioelongl.github.io
Releases0
Stars13
Exploiting CVE-2014-3153, AKA Towelroot.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2014-3153↗
7.8 HIGH7.2 HIGH

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.