CVE-2014-0069

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.13.5

Description The issue is related to the cifs iovec write function in fs/cifs/file.c, which does not properly handle uncached write operations that copy fewer than the requested number of bytes. This allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.

Recommendations For Linux kernel versions through 3.13.5, update to a version later than 3.13.5 to resolve the issue. As a temporary workaround, consider restricting access to the cifs iovec write function until a patch is available.