CVE-2014-3180
Fixed in a distro release EPSS 1%
In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restart_syscall uses uninitialized data when restarting compat_sys_nanosleep. NOTE: this is disputed because the code path is unreachable
Products: Linux kernel
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 4.0.2-1 |
| Debian 13 | linux | 4.0.2-1 |
| Debian 14 | linux | 4.0.2-1 |
| Ubuntu 18.04 LTS | linux-azure-edge | no fix |
| Ubuntu 18.04 LTS | linux-gcp-edge | no fix |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 20.04 LTS | linux-gke | no fix |
| Ubuntu 20.04 LTS | linux-gkeop | no fix |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |