--- title: "CVE-2014-3145\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2014-3145?format=md keywords: index, follow --- # CVE-2014-3145 Publication date 11 May 2014 Last updated 4 July 2026 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description The BPF\_S\_ANC\_NLATTR\_NEST extension implementation in the sk\_run\_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the \_\_skb\_get\_nlattr\_nest function before the vulnerability was announced. ### From the Ubuntu Security Team A remainder calculation error was discovered in the socket filter subsystem of the Linux kernel. A local user could exploit this flaw to cause a denial of service (system crash) via crafted BPF instructions. [Read the notes from the security team](https://ubuntu.com/security/CVE-2014-3145?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | linux | 17.04 zesty | Not affected | | 16.10 yakkety | Not affected | | 16.04 LTS xenial | Not affected | | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Fixed 3.13.0-32.57 | | 13.10 saucy | Fixed 3.11.0-24.41 | | 12.10 quantal | Ignored end of life | | 12.04 LTS precise | Fixed 3.2.0-65.98 | | 10.04 LTS lucid | Fixed 2.6.32-62.125 | | linux-2.6 | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-armadaxp | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.10 quantal | Ignored end of life | | 12.04 LTS precise | Fixed 3.2.0-1635.50 | | 10.04 LTS lucid | Not in release | | linux-aws | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not affected | | 12.04 LTS precise | Not in release | | linux-ec2 | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Fixed 2.6.32-366.80 | | linux-flo | 17.04 zesty | Not in release | | 16.10 yakkety | Ignored end of life | | 16.04 LTS xenial | Not in release | | 15.10 wily | Ignored end of life | | 15.04 vivid | Ignored end of life | | 14.10 utopic | Ignored end of life | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-fsl-imx51 | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Ignored end of life | | linux-gke | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-goldfish | 17.04 zesty | Ignored end of life | | 16.10 yakkety | Ignored end of life | | 16.04 LTS xenial | Not in release | | 15.10 wily | Ignored end of life | | 15.04 vivid | Ignored end of life | | 14.10 utopic | Ignored end of life | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-grouper | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Ignored end of life | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-hwe | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-hwe-edge | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-linaro-omap | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.10 quantal | Ignored end of life | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-linaro-shared | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.10 quantal | Ignored end of life | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-linaro-vexpress | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.10 quantal | Ignored end of life | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-lts-quantal | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.10 quantal | Not in release | | 12.04 LTS precise | Fixed 3.5.0-52.78~precise1 | | 10.04 LTS lucid | Not in release | | linux-lts-raring | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.10 quantal | Not in release | | 12.04 LTS precise | Fixed 3.8.0-44.66~precise1 | | 10.04 LTS lucid | Not in release | | linux-lts-saucy | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.10 quantal | Not in release | | 12.04 LTS precise | Fixed 3.11.0-24.41~precise1 | | 10.04 LTS lucid | Not in release | | linux-lts-trusty | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Fixed 3.13.0-32.57~precise1 | | 10.04 LTS lucid | Not in release | | linux-lts-utopic | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-lts-vivid | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-lts-wily | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-lts-xenial | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.04 LTS trusty | Not affected | | 12.04 LTS precise | Not in release | | linux-maguro | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-mako | 17.04 zesty | Not in release | | 16.10 yakkety | Ignored end of life | | 16.04 LTS xenial | Not in release | | 15.10 wily | Ignored end of life | | 15.04 vivid | Ignored end of life | | 14.10 utopic | Ignored end of life | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-manta | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Ignored end of life | | 15.04 vivid | Ignored end of life | | 14.10 utopic | Ignored end of life | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-mvl-dove | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Ignored end of life | | linux-qcm-msm | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.10 quantal | Ignored end of life | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Ignored end of life | | linux-raspi2 | 17.04 zesty | Not affected | | 16.10 yakkety | Not affected | | 16.04 LTS xenial | Not affected | | 15.10 wily | Not affected | | 15.04 vivid | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-snapdragon | 17.04 zesty | Not affected | | 16.10 yakkety | Not affected | | 16.04 LTS xenial | Not affected | | 15.10 wily | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-ti-omap4 | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored end of life | | 12.10 quantal | Ignored end of life | | 12.04 LTS precise | Fixed 3.2.0-1450.69 | | 10.04 LTS lucid | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) * [Patch details](https://ubuntu.com/security/CVE-2014-3145?format=md#patch-details) ## Notes --- ### [jdstrand](https://launchpad.net/~jdstrand) android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels ### Patch details For informational purposes only. We recommend not to cherry-pick updates. [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) | Package | Patch details | | --- | --- | | linux | * Introduced by [d214c75](https://git.kernel.org/linus/d214c7537bbf2f247991fb65b3420b0b3d712c67), fixed by [05ab8f2](https://git.kernel.org/linus/05ab8f2647e4221cbdb3856dd7d32bd5407316b3) | ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3145) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2014-3145) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2014-3145) * [Debian](https://security-tracker.debian.org/tracker/CVE-2014-3145) ### Related Ubuntu Security Notices (USN) + [USN-2261-1](https://usn.ubuntu.com/USN-2261-1) + Linux kernel (Saucy HWE) vulnerabilities + 27 June 2014 + [USN-2286-1](https://usn.ubuntu.com/USN-2286-1) + Linux kernel (Raring HWE) vulnerabilities + 17 July 2014 + [USN-2252-1](https://usn.ubuntu.com/USN-2252-1) + Linux kernel (EC2) vulnerabilities + 20 June 2014 + [USN-2259-1](https://usn.ubuntu.com/USN-2259-1) + Linux kernel vulnerabilities + 27 June 2014 + [USN-2251-1](https://usn.ubuntu.com/USN-2251-1) + Linux kernel vulnerabilities + 20 June 2014 + [USN-2264-1](https://usn.ubuntu.com/USN-2264-1) + Linux kernel vulnerabilities + 27 June 2014 + [USN-2263-1](https://usn.ubuntu.com/USN-2263-1) + Linux kernel (OMAP4) vulnerabilities + 27 June 2014 + [USN-2288-1](https://usn.ubuntu.com/USN-2288-1) + Linux kernel (Trusty HWE) vulnerabilities + 17 July 2014 + [USN-2290-1](https://usn.ubuntu.com/USN-2290-1) + Linux kernel vulnerabilities + 17 July 2014 + [USN-2262-1](https://usn.ubuntu.com/USN-2262-1) + Linux kernel (Quantal HWE) vulnerabilities + 27 June 2014 ### Other references * * * * *