CVE-2014-2038

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13.3

Description The issue allows local users to obtain sensitive information from kernel memory under certain circumstances. This is due to the nfs can extend write function relying on a write delegation to extend a write operation without proper verification. The exploitation involves writing to a file in an NFS filesystem and then reading the same file.

Recommendations For Linux kernel versions prior to 3.13.3, update to version 3.13.3 or later to resolve the issue.