CVE-2014-9940

Description

The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted application.

Risk Information

Base Score
7.0
MODERATE
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.097

Associated Vulnerability

VulnerabilityOS Platform
Linux kernel (USN-3335-1) linux-image-generic_3.13.0.121.131_amd64.debLinux
Linux kernel (USN-3335-1) linux-image-lowlatency_3.13.0.121.131_amd64.debLinux
Linux kernel (USN-3335-1) linux-image-3.13.0-121-generic_3.13.0-121.170_i386.debLinux
Linux kernel (USN-3335-1) linux-image-3.13.0-121-generic_3.13.0-121.170_amd64.debLinux
Linux kernel (USN-3335-1) linux-image-3.13.0-121-lowlatency_3.13.0-121.170_i386.debLinux
Linux kernel (USN-3335-1) linux-image-3.13.0-121-lowlatency_3.13.0-121.170_amd64.debLinux
Linux kernel (USN-3343-1) linux-image-3.13.0-123-generic_3.13.0-123.172_i386.debLinux
Linux kernel (USN-3343-1) linux-image-3.13.0-123-generic_3.13.0-123.172_amd64.debLinux
Linux kernel (USN-3343-1) linux-image-3.13.0-123-lowlatency_3.13.0-123.172_i386.debLinux
Linux kernel (USN-3343-1) linux-image-3.13.0-123-lowlatency_3.13.0-123.172_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234