CVE-2014-3180

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.17

Description There is a possible out-of-bounds read in the Linux kernel. The restart syscall function uses uninitialized data when restarting compat sys nanosleep. However, this issue is disputed because the code path is reportedly unreachable.

Recommendations For Linux kernel versions prior to 3.17, update to version 3.17 or later to resolve the issue. As a temporary workaround, consider restricting access to the compat sys nanosleep function until a patch is available.