Description
arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to cause a denial of service (OOPS and system crash) via an invalid syscall number, as demonstrated by number 1000.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 3.14.9-1 | — |
| Debian 13 | linux | 3.14.9-1 | — |
| Debian 12 | linux | 3.14.9-1 | — |
| Debian 6.0 | linux-2.6 | 2.6.32-48squeeze9 | DLA-103-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-riscv +6 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv +2 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +4 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +3 | No fix yet | — |
| Ubuntu 14.04 LTS | linux | 3.13.0-35.62 | USN-2337-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | linux-azure-fde-5.15 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 ELS | perf +14 | 2.6.32-754.36.1.el6 | RHSA-2021:0181 |
Advisories 3
- RHSA-2021:0181 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- USN-2337-1 linux vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- DLA-103-1 linux-2.6 - security update Debian Security (DSA / DLA) · Mar 9, 2026
References
- SUSE-SU-2014:1316 vendor-advisory
- [oss-security] 20140620 Re: CVE request: Another Linux syscall auditing bug mailing-list
- [oss-security] 20140619 CVE request: Another Linux syscall auditing bug mailing-list
- USN-2334-1 vendor-advisory
- https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.61
- SUSE-SU-2014:1319 vendor-advisory
- 60564 third-party-advisory
- openSUSE-SU-2015:0566 vendor-advisory
- 68126 vdb-entry
- [linux-kernel] 20140616 Re: 3.15: kernel BUG at kernel/auditsc.c:1525! mailing-list
- 58964 third-party-advisory
- [oss-security] 20201112 CVE-2014-4508 mailing-list