CVE-2014-3153
KEVHIGH 7.8EPSS 37.2%
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 37.23% chance of exploitation in the next 30 days, 99th percentile
- CISA KEV
- added 2022-05-25
- Published
- 2014-06-07
- Updated
- 2025-10-22
Proof-of-concept exploits (12)
- http://www.exploit-db.com/exploits/35370
- https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html
- android-rooting-tools/libfutex_exploit19★ · 2015-10-07
- c3c/CVE-2014-31530★ · 2015-09-04
- c4mx/Linux-kernel-code-injection_CVE-2014-31530★ · 2022-02-01
- elongl/CVE-2014-315313★ · 2021-01-16
- geekben/towelroot46★ · 2014-10-25
- lieanu/CVE-2014-315318★ · 2015-01-24
- sin4ts/CVE2014-31531★ · 2016-05-15
- timwr/CVE-2014-3153124★ · 2017-04-25
- zerodavinci/CVE-2014-3153-exploit5★ · 2016-03-08
- nataniss/gt-7240r-root1★ · 2026-09-24
Metasploit modules (1)
ExploitDB entries (1)
Exploit collections (1)
- CVE-2014-3153helloexp/0day
Security advisories
- http://linux.oracle.com/errata/ELSA-2014-0771.html
- http://linux.oracle.com/errata/ELSA-2014-3037.html
- http://linux.oracle.com/errata/ELSA-2014-3038.html
- http://linux.oracle.com/errata/ELSA-2014-3039.html
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.html
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
- http://rhn.redhat.com/errata/RHSA-2014-0800.html
- http://www.securityfocus.com/bid/67906
- http://www.securitytracker.com/id/1030451
- http://www.ubuntu.com/usn/USN-2237-1
- http://www.ubuntu.com/usn/USN-2240-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1103626
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fbca4c6ecd96…
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a217887a7b65…
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3eaa9fc5cd0a4…
- torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8