Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.2
CVE-2014-3534: Linux s390 kernel lets local users edit kernel memory
CVE-2014-3534 · published 12 years ago
Summary
Versions of the Linux kernel older than 3.15.8 on IBM s390 hardware do not properly block certain debugging commands. A regular user could run a specially crafted program to read or change the operating system's memory, potentially gaining higher privileges. Upgrade the kernel to version 3.15.8 or later, or apply the vendor's security patch.
What to do
- Update debian linux to version 3.14.13-2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | linux |
< 3.14.13-2 Fix: upgrade to 3.14.13-2
|
| Debian:13 | debian | linux |
< 3.14.13-2 Fix: upgrade to 3.14.13-2
|
| Debian:14 | debian | linux |
< 3.14.13-2 Fix: upgrade to 3.14.13-2
|
| – | linux | linux_kernel |
< 3.2.62 >= 3.3, < 3.4.101 >= 3.5, < 3.10.51 >= 3.11, < 3.12.27 >= 3.13, < 3.14.15 >= 3.15, < 3.15.8 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | debian | debian_linux |
7.0 cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* |
Original advisory text
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_AREA requests, which allows local user...
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_AREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a crafted application that makes a ptrace system call.
References
- https://security-tracker.debian.org/tracker/CVE-2014-3534 Vendor Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=... Broken Link
- http://secunia.com/advisories/59790 Third Party Advisory
- http://secunia.com/advisories/60351 Third Party Advisory
- http://www.debian.org/security/2014/dsa-2992 Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.8 Release Notes Vendor Advisory
- http://www.osvdb.org/109546 Broken Link
- http://www.securityfocus.com/bid/68940 Third Party Advisory VDB Entry
- http://www.securitytracker.com/id/1030683 Third Party Advisory VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1114089 Issue Tracking Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95069 Third Party Advisory VDB Entry
- https://github.com/torvalds/linux/commit/dab6cf55f81a6e16b8147aed9a843e1691dcd31... Patch Third Party Advisory
Severity
7.2
High
Type
CWE-269Improper Privilege Management
Timeline
Published1 Aug 2014
Updated4 Nov 2026
First seen1 Sep 2026
Track software like this
Free during beta