Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.1

Linux Kernel: Local Users Can Access Sensitive Information

CVE-2014-1445 · published 12 years ago
Summary

A security issue in the Linux kernel allows local users to access sensitive information. This affects Linux systems before version 3.11.7. To protect your system, update to the latest version of the Linux kernel.

What to do
  • Update debian linux to version 3.12.6-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:11 debian linux < 3.12.6-1
Fix: upgrade to 3.12.6-1
Debian:12 debian linux < 3.12.6-1
Fix: upgrade to 3.12.6-1
Debian:13 debian linux < 3.12.6-1
Fix: upgrade to 3.12.6-1
Debian:14 debian linux < 3.12.6-1
Fix: upgrade to 3.12.6-1
– linux linux_kernel <= 3.11.6
3.11
3.11.1
3.11.2
3.11.3
3.11.4
3.11.5
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Original advisory text
The wanxl_ioctl function in drivers/net/wan/wanxl.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, which allows local users to obtain sensitive information...
The wanxl_ioctl function in drivers/net/wan/wanxl.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an ioctl call.
References
Severity
2.1 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published18 Jan 2014
Updated4 Nov 2026
First seen8 Aug 2026
Sources
DEBIAN-CVE-2014-1445 · OSV
CVE-2014-1445 · NVD
Track software like this
Free during beta