CVE-2014-1737 | Mend Vulnerability Database

Vulnerability DatabaseCVE-2014-1737

CVE-2014-1737

Published:May 11, 2014

Updated:May 17, 2026

The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.

Related Resources (22)

http://rhn.redhat.com/errata/RHSA-2014-0800.html

http://secunia.com/advisories/59309

http://linux.oracle.com/errata/ELSA-2014-0771.html

http://rhn.redhat.com/errata/RHSA-2014-0801.html

https://people.canonical.com/~ubuntu-security/cve/CVE-2014-1737

http://secunia.com/advisories/59406

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ef87dbe7614341c2e7bfe8d32fcb7028cc97442c

http://www.openwall.com/lists/oss-security/2014/05/09/2

https://access.redhat.com/security/cve/CVE-2014-1737

http://linux.oracle.com/errata/ELSA-2014-3043.html

http://www.securityfocus.com/bid/67300