Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2014-1438 Details

Description

The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26bef1318adc1b3a530ecc807ef99346db2aa8b0 CVE
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126858.html CVE
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126874.html CVE
https://bugzilla.redhat.com/show_bug.cgi?id=1052914 CVE
https://github.com/torvalds/linux/commit/26bef1318adc1b3a530ecc807ef99346db2aa8b0 CVE

see all 42 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-264Permissions, Privileges, and Access Controls[email protected]

Affected Products

ProductVersions
linux linux kernel
<= 3.12.7
3.12
3.12.1
3.12.2
3.12.3

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.12:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.12.1:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.12.2:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.12.3:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.12.4:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.12.5:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.12.6:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes


QUICK INFO

CVE Dictionary Entry:
CVE-2014-1438
NVD Published Date:
Jan 18, 2014
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2014-1438 Details - Not Deferred