CVE-2014-7826

Upstream information

CVE-2014-7826 at MITRE

Description

kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via a crafted application.

---

SUSE information

Overall state of this security issue: Does not affect SUSE products

SUSE Bugzilla entries: 904012 [RESOLVED / FIXED], 904013 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SU-2014:1693-1, published Tue Dec 23 11:06:19 MST 2014
• SUSE-SU-2014:1693-2, published Wed Dec 24 00:08:45 MST 2014
• SUSE-SU-2014:1695-1, published Tue Dec 23 12:05:01 MST 2014
• SUSE-SU-2014:1695-2, published Wed Jan 14 11:04:40 MST 2015
• SUSE-SU-2015:0068-1, published Fri Jan 16 06:05:01 MST 2015
• SUSE-SU-2015:0481-1, published Wed Mar 11 13:05:42 MDT 2015
• openSUSE-SU-2014:1669-1, published Fri Dec 8 15:48:33 2023
• openSUSE-SU-2014:1677-1, published Fri Dec 8 15:48:33 2023
• openSUSE-SU-2014:1678-1, published Fri Dec 8 15:48:33 2023
• openSUSE-SU-2015:0566-1, published Fri Dec 8 15:48:33 2023

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Liberty Linux 7	kernel >= 3.10.0-229.el7 kernel-abi-whitelists >= 3.10.0-229.el7 kernel-debug >= 3.10.0-229.el7 kernel-debug-devel >= 3.10.0-229.el7 kernel-devel >= 3.10.0-229.el7 kernel-doc >= 3.10.0-229.el7 kernel-headers >= 3.10.0-229.el7 kernel-tools >= 3.10.0-229.el7 kernel-tools-libs >= 3.10.0-229.el7 kernel-tools-libs-devel >= 3.10.0-229.el7 perf >= 3.10.0-229.el7 python-perf >= 3.10.0-229.el7	Patchnames: RHSA-2015:0290
SUSE Linux Enterprise Desktop 11 SP3	kernel-bigsmp-devel >= 3.0.101-0.46.1 kernel-default >= 3.0.101-0.46.1 kernel-default-base >= 3.0.101-0.46.1 kernel-default-devel >= 3.0.101-0.46.1 kernel-default-extra >= 3.0.101-0.46.1 kernel-pae >= 3.0.101-0.42.1 kernel-pae-base >= 3.0.101-0.42.1 kernel-pae-devel >= 3.0.101-0.42.1 kernel-pae-extra >= 3.0.101-0.42.1 kernel-source >= 3.0.101-0.46.1 kernel-syms >= 3.0.101-0.46.1 kernel-trace-devel >= 3.0.101-0.46.1 kernel-xen >= 3.0.101-0.46.1 kernel-xen-base >= 3.0.101-0.46.1 kernel-xen-devel >= 3.0.101-0.46.1 kernel-xen-extra >= 3.0.101-0.46.1 xen-kmp-default >= 4.2.5_02_3.0.101_0.46-0.7.9 xen-kmp-pae >= 4.2.5_02_3.0.101_0.42-0.7.2	Patchnames: sledsp3-kernel
SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4	kernel-docs >= 3.0.101-63.1	Patchnames: SUSE Linux Enterprise Software Development Kit 11 SP4 GA kernel-docs-3.0.101-63.1
SUSE Linux Enterprise Desktop 12 SP1	kernel-default >= 3.12.49-11.1 kernel-default-devel >= 3.12.49-11.1 kernel-default-extra >= 3.12.49-11.1 kernel-devel >= 3.12.49-11.1 kernel-docs >= 3.12.49-11.1 kernel-macros >= 3.12.49-11.1 kernel-obs-build >= 3.12.49-11.2 kernel-source >= 3.12.49-11.1 kernel-syms >= 3.12.49-11.1 kernel-xen >= 3.12.49-11.1 kernel-xen-devel >= 3.12.49-11.1	Patchnames: SUSE Linux Enterprise Desktop 12 SP1 GA kernel-default-3.12.49-11.1 SUSE Linux Enterprise Software Development Kit 12 SP1 GA kernel-docs-3.12.49-11.1 SUSE Linux Enterprise Workstation Extension 12 SP1 GA kernel-default-extra-3.12.49-11.1
SUSE Linux Enterprise Desktop 12	kernel-default >= 3.12.32-33.1 kernel-default-devel >= 3.12.32-33.1 kernel-default-extra >= 3.12.32-33.1 kernel-devel >= 3.12.32-33.1 kernel-docs >= 3.12.32-33.3 kernel-macros >= 3.12.32-33.1 kernel-obs-build >= 3.12.32-33.1 kernel-source >= 3.12.32-33.1 kernel-syms >= 3.12.32-33.1 kernel-xen >= 3.12.32-33.1 kernel-xen-devel >= 3.12.32-33.1	Patchnames: SUSE-SLE-DESKTOP-12-2015-21 SUSE-SLE-SDK-12-2015-21 SUSE-SLE-WE-12-2015-21
SUSE Linux Enterprise High Availability Extension 11 SP3	cluster-network-kmp-bigsmp >= 1.4_3.0.101_0.46-2.27.120 cluster-network-kmp-default >= 1.4_3.0.101_0.46-2.27.120 cluster-network-kmp-pae >= 1.4_3.0.101_0.42-2.27.115 cluster-network-kmp-ppc64 >= 1.4_3.0.101_0.42-2.27.115 cluster-network-kmp-trace >= 1.4_3.0.101_0.46-2.27.120 cluster-network-kmp-xen >= 1.4_3.0.101_0.46-2.27.120 gfs2-kmp-bigsmp >= 2_3.0.101_0.46-0.16.126 gfs2-kmp-default >= 2_3.0.101_0.46-0.16.126 gfs2-kmp-pae >= 2_3.0.101_0.42-0.16.121 gfs2-kmp-ppc64 >= 2_3.0.101_0.42-0.16.121 gfs2-kmp-trace >= 2_3.0.101_0.46-0.16.126 gfs2-kmp-xen >= 2_3.0.101_0.46-0.16.126 ocfs2-kmp-bigsmp >= 1.6_3.0.101_0.46-0.20.120 ocfs2-kmp-default >= 1.6_3.0.101_0.46-0.20.120 ocfs2-kmp-pae >= 1.6_3.0.101_0.42-0.20.115 ocfs2-kmp-ppc64 >= 1.6_3.0.101_0.42-0.20.115 ocfs2-kmp-trace >= 1.6_3.0.101_0.46-0.20.120 ocfs2-kmp-xen >= 1.6_3.0.101_0.46-0.20.120	Patchnames: slehasp3-kernel
SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5	kernel-ec2 >= 3.12.32-33.1 kernel-ec2-devel >= 3.12.32-33.1 kernel-ec2-extra >= 3.12.32-33.1	Patchnames: SUSE-SLE-Module-Public-Cloud-12-2015-21
SUSE Linux Enterprise Real Time 11 SP3	cluster-network-kmp-rt >= 1.4_3.0.101_rt130_0.32-2.27.121 cluster-network-kmp-rt_trace >= 1.4_3.0.101_rt130_0.32-2.27.121 drbd-kmp-rt >= 8.4.4_3.0.101_rt130_0.32-0.22.87 drbd-kmp-rt_trace >= 8.4.4_3.0.101_rt130_0.32-0.22.87 iscsitarget-kmp-rt >= 1.4.20_3.0.101_rt130_0.32-0.38.106 iscsitarget-kmp-rt_trace >= 1.4.20_3.0.101_rt130_0.32-0.38.106 kernel-rt >= 3.0.101.rt130-0.32.1 kernel-rt-base >= 3.0.101.rt130-0.32.1 kernel-rt-devel >= 3.0.101.rt130-0.32.1 kernel-rt_trace >= 3.0.101.rt130-0.32.1 kernel-rt_trace-base >= 3.0.101.rt130-0.32.1 kernel-rt_trace-devel >= 3.0.101.rt130-0.32.1 kernel-source-rt >= 3.0.101.rt130-0.32.1 kernel-syms-rt >= 3.0.101.rt130-0.32.1 lttng-modules-kmp-rt >= 2.1.1_3.0.101_rt130_0.32-0.11.96 lttng-modules-kmp-rt_trace >= 2.1.1_3.0.101_rt130_0.32-0.11.96 ocfs2-kmp-rt >= 1.6_3.0.101_rt130_0.32-0.20.121 ocfs2-kmp-rt_trace >= 1.6_3.0.101_rt130_0.32-0.20.121 ofed-kmp-rt >= 1.5.4.1_3.0.101_rt130_0.32-0.13.112 ofed-kmp-rt_trace >= 1.5.4.1_3.0.101_rt130_0.32-0.13.112	Patchnames: slertesp3-kernel
SUSE Linux Enterprise Server 11 SP2-LTSS	kernel-default >= 3.0.101-0.7.29.1 kernel-default-base >= 3.0.101-0.7.29.1 kernel-default-devel >= 3.0.101-0.7.29.1 kernel-default-man >= 3.0.101-0.7.29.1 kernel-ec2 >= 3.0.101-0.7.29.1 kernel-ec2-base >= 3.0.101-0.7.29.1 kernel-ec2-devel >= 3.0.101-0.7.29.1 kernel-pae >= 3.0.101-0.7.29.1 kernel-pae-base >= 3.0.101-0.7.29.1 kernel-pae-devel >= 3.0.101-0.7.29.1 kernel-source >= 3.0.101-0.7.29.1 kernel-syms >= 3.0.101-0.7.29.1 kernel-trace >= 3.0.101-0.7.29.1 kernel-trace-base >= 3.0.101-0.7.29.1 kernel-trace-devel >= 3.0.101-0.7.29.1 kernel-xen >= 3.0.101-0.7.29.1 kernel-xen-base >= 3.0.101-0.7.29.1 kernel-xen-devel >= 3.0.101-0.7.29.1 xen-kmp-default >= 4.1.6_08_3.0.101_0.7.29-0.5.19 xen-kmp-pae >= 4.1.6_08_3.0.101_0.7.29-0.5.19 xen-kmp-trace >= 4.1.6_08_3.0.101_0.7.29-0.5.19	Patchnames: slessp2-kernel
SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP3	kernel-bigsmp >= 3.0.101-0.46.1 kernel-bigsmp-base >= 3.0.101-0.46.1 kernel-bigsmp-devel >= 3.0.101-0.46.1 kernel-default >= 3.0.101-0.46.1 kernel-default-base >= 3.0.101-0.46.1 kernel-default-devel >= 3.0.101-0.46.1 kernel-default-man >= 3.0.101-0.42.1 kernel-ec2 >= 3.0.101-0.46.1 kernel-ec2-base >= 3.0.101-0.46.1 kernel-ec2-devel >= 3.0.101-0.46.1 kernel-pae >= 3.0.101-0.42.1 kernel-pae-base >= 3.0.101-0.42.1 kernel-pae-devel >= 3.0.101-0.42.1 kernel-ppc64 >= 3.0.101-0.42.1 kernel-ppc64-base >= 3.0.101-0.42.1 kernel-ppc64-devel >= 3.0.101-0.42.1 kernel-source >= 3.0.101-0.46.1 kernel-syms >= 3.0.101-0.46.1 kernel-trace >= 3.0.101-0.46.1 kernel-trace-base >= 3.0.101-0.46.1 kernel-trace-devel >= 3.0.101-0.46.1 kernel-xen >= 3.0.101-0.46.1 kernel-xen-base >= 3.0.101-0.46.1 kernel-xen-devel >= 3.0.101-0.46.1 xen-kmp-default >= 4.2.5_02_3.0.101_0.46-0.7.9 xen-kmp-pae >= 4.2.5_02_3.0.101_0.42-0.7.2	Patchnames: slessp3-kernel
SUSE Linux Enterprise Server 11 SP4	kernel-default >= 3.0.101-63.1 kernel-default-base >= 3.0.101-63.1 kernel-default-devel >= 3.0.101-63.1 kernel-default-man >= 3.0.101-63.1 kernel-docs >= 3.0.101-63.1 kernel-pae >= 3.0.101-63.1 kernel-pae-base >= 3.0.101-63.1 kernel-pae-devel >= 3.0.101-63.1 kernel-ppc64 >= 3.0.101-63.1 kernel-ppc64-base >= 3.0.101-63.1 kernel-ppc64-devel >= 3.0.101-63.1 kernel-source >= 3.0.101-63.1 kernel-syms >= 3.0.101-63.1 kernel-trace >= 3.0.101-63.1 kernel-trace-base >= 3.0.101-63.1 kernel-trace-devel >= 3.0.101-63.1 kernel-xen >= 3.0.101-63.1 kernel-xen-base >= 3.0.101-63.1 kernel-xen-devel >= 3.0.101-63.1	Patchnames: SUSE Linux Enterprise Server 11 SP4 GA kernel-default-3.0.101-63.1 SUSE Linux Enterprise Software Development Kit 11 SP4 GA kernel-docs-3.0.101-63.1
SUSE Linux Enterprise Server 12 SP1	kernel-default >= 3.12.49-11.1 kernel-default-base >= 3.12.49-11.1 kernel-default-devel >= 3.12.49-11.1 kernel-default-extra >= 3.12.49-11.1 kernel-default-man >= 3.12.49-11.1 kernel-devel >= 3.12.49-11.1 kernel-docs >= 3.12.49-11.1 kernel-macros >= 3.12.49-11.1 kernel-obs-build >= 3.12.49-11.2 kernel-source >= 3.12.49-11.1 kernel-syms >= 3.12.49-11.1 kernel-xen >= 3.12.49-11.1 kernel-xen-base >= 3.12.49-11.1 kernel-xen-devel >= 3.12.49-11.1	Patchnames: SUSE Linux Enterprise Server 12 SP1 GA kernel-default-3.12.49-11.1 SUSE Linux Enterprise Software Development Kit 12 SP1 GA kernel-docs-3.12.49-11.1 SUSE Linux Enterprise Workstation Extension 12 SP1 GA kernel-default-extra-3.12.49-11.1
SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12	kernel-default >= 3.12.32-33.1 kernel-default-base >= 3.12.32-33.1 kernel-default-devel >= 3.12.32-33.1 kernel-default-extra >= 3.12.32-33.1 kernel-default-man >= 3.12.32-33.1 kernel-devel >= 3.12.32-33.1 kernel-docs >= 3.12.32-33.3 kernel-ec2 >= 3.12.32-33.1 kernel-ec2-devel >= 3.12.32-33.1 kernel-ec2-extra >= 3.12.32-33.1 kernel-macros >= 3.12.32-33.1 kernel-obs-build >= 3.12.32-33.1 kernel-source >= 3.12.32-33.1 kernel-syms >= 3.12.32-33.1 kernel-xen >= 3.12.32-33.1 kernel-xen-base >= 3.12.32-33.1 kernel-xen-devel >= 3.12.32-33.1	Patchnames: SUSE-SLE-Module-Public-Cloud-12-2015-21 SUSE-SLE-SDK-12-2015-21 SUSE-SLE-SERVER-12-2015-21 SUSE-SLE-WE-12-2015-21
SUSE Linux Enterprise Server for SAP Applications 12 SP1	kernel-default-extra >= 3.12.49-11.1 kernel-docs >= 3.12.49-11.1 kernel-obs-build >= 3.12.49-11.2	Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP1 GA kernel-docs-3.12.49-11.1 SUSE Linux Enterprise Workstation Extension 12 SP1 GA kernel-default-extra-3.12.49-11.1
SUSE Linux Enterprise Software Development Kit 12 SP1	kernel-docs >= 3.12.49-11.1 kernel-obs-build >= 3.12.49-11.2	Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP1 GA kernel-docs-3.12.49-11.1
SUSE Linux Enterprise Software Development Kit 12	kernel-docs >= 3.12.32-33.3 kernel-obs-build >= 3.12.32-33.1	Patchnames: SUSE-SLE-SDK-12-2015-21
SUSE Linux Enterprise Workstation Extension 12 SP1	kernel-default-extra >= 3.12.49-11.1	Patchnames: SUSE Linux Enterprise Workstation Extension 12 SP1 GA kernel-default-extra-3.12.49-11.1
SUSE Linux Enterprise Workstation Extension 12	kernel-default-extra >= 3.12.32-33.1	Patchnames: SUSE-SLE-WE-12-2015-21

---

SUSE Timeline for this CVE

CVE page created: Fri Oct 7 12:46:53 2022
CVE page last modified: Fri Dec 8 17:05:27 2023