--- title: "CVE-2014-3153\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2014-3153?format=md keywords: index, follow --- # CVE-2014-3153 Publication date 5 June 2014 Last updated 4 July 2026 --- Ubuntu priority **High** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) ## Cvss 3 Severity Score **7.8 · High** [Score breakdown](https://ubuntu.com/security/CVE-2014-3153?format=md#impact-score) Toggle side navigation ## Description The futex\_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX\_REQUEUE command that facilitates unsafe waiter modification. ### From the Ubuntu Security Team Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or gain administrative privileges. [Read the notes from the security team](https://ubuntu.com/security/CVE-2014-3153?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | linux | 17.04 zesty | Not affected | | 16.10 yakkety | Not affected | | 16.04 LTS xenial | Not affected | | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Fixed 3.13.0-29.53 | | 13.10 saucy | Fixed 3.11.0-23.40 | | 12.04 LTS precise | Fixed 3.2.0-64.97 | | 10.04 LTS lucid | Fixed 2.6.32-61.124 | | linux-armadaxp | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Fixed 3.2.0-1634.49 | | 10.04 LTS lucid | Not in release | | linux-aws | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not affected | | 12.04 LTS precise | Not in release | | linux-ec2 | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Fixed 2.6.32-365.79 | | linux-flo | 17.04 zesty | Not in release | | 16.10 yakkety | Not affected | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-fsl-imx51 | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Ignored end of life | | linux-gke | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-goldfish | 17.04 zesty | Not affected | | 16.10 yakkety | Not affected | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-grouper | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Ignored end of life | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-hwe | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-hwe-edge | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-linaro-omap | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-linaro-shared | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-linaro-vexpress | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-lts-quantal | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Fixed 3.5.0-51.77~precise1 | | 10.04 LTS lucid | Not in release | | linux-lts-raring | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Fixed 3.8.0-42.62~precise1 | | 10.04 LTS lucid | Not in release | | linux-lts-saucy | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Fixed 3.11.0-23.40~precise1 | | 10.04 LTS lucid | Not in release | | linux-lts-trusty | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Fixed 3.13.0-29.53~precise1 | | 10.04 LTS lucid | Not in release | | linux-lts-utopic | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-lts-vivid | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-lts-wily | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-lts-xenial | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.04 LTS trusty | Not affected | | 12.04 LTS precise | Not in release | | linux-maguro | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-mako | 17.04 zesty | Not in release | | 16.10 yakkety | Not affected | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-manta | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-mvl-dove | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Ignored end of life | | linux-qcm-msm | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Ignored end of life | | linux-raspi2 | 17.04 zesty | Not affected | | 16.10 yakkety | Not affected | | 16.04 LTS xenial | Not affected | | 15.10 wily | Not affected | | 15.04 vivid | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-snapdragon | 17.04 zesty | Not affected | | 16.10 yakkety | Not affected | | 16.04 LTS xenial | Not affected | | 15.10 wily | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-ti-omap4 | 17.04 zesty | Not in release | | 16.10 yakkety | Not in release | | 16.04 LTS xenial | Not in release | | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored end of life | | 12.04 LTS precise | Fixed 3.2.0-1449.68 | | 10.04 LTS lucid | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) * [Patch details](https://ubuntu.com/security/CVE-2014-3153?format=md#patch-details) ## Notes --- ### [jdstrand](https://launchpad.net/~jdstrand) android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels ### Patch details For informational purposes only. We recommend not to cherry-pick updates. [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) | Package | Patch details | | --- | --- | | linux | * Introduced by [52400ba](https://git.kernel.org/linus/52400ba946759af28442dee6265c5c0180ac7122), fixed by [54a2178](https://git.kernel.org/linus/54a217887a7b658e2650c3feff22756ab80c7339) * Introduced by [52400ba](https://git.kernel.org/linus/52400ba946759af28442dee6265c5c0180ac7122), fixed by [13fbca4](https://git.kernel.org/linus/13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e) * Introduced by [52400ba](https://git.kernel.org/linus/52400ba946759af28442dee6265c5c0180ac7122), fixed by [b3eaa9f](https://git.kernel.org/linus/b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270) * Introduced by [52400ba](https://git.kernel.org/linus/52400ba946759af28442dee6265c5c0180ac7122), fixed by [e9c243a](https://git.kernel.org/linus/e9c243a5a6de0be8e584c604d353412584b592f8) | ## Severity score breakdown CVSS version: CVSS v3.0 **Base score** 7.8 · High * Base metrics | Parameter | Value | | --- | --- | | Attack vector | Local | | Attack complexity | Low | | Privileges required | Low | | User interaction | None | | Scope | Unchanged | | Confidentiality impact | High | | Integrity impact | High | | Availability impact | High | * Scores | Parameter | Value | | --- | --- | | Base score | 7.8 · High | | Exploitability score | - | | Impact score | - | **Vector:** CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2014-3153) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2014-3153) * [Debian](https://security-tracker.debian.org/tracker/CVE-2014-3153) ### Related Ubuntu Security Notices (USN) + [USN-2235-1](https://usn.ubuntu.com/USN-2235-1) + Linux kernel vulnerabilities + 5 June 2014 + [USN-2237-1](https://usn.ubuntu.com/USN-2237-1) + Linux kernel (Quantal HWE) vulnerability + 5 June 2014 + [USN-2236-1](https://usn.ubuntu.com/USN-2236-1) + Linux kernel (OMAP4) vulnerabilities + 5 June 2014 + [USN-2260-1](https://usn.ubuntu.com/USN-2260-1) + Linux kernel (Trusty HWE) vulnerabilities + 27 June 2014 + [USN-2240-1](https://usn.ubuntu.com/USN-2240-1) + Linux kernel vulnerabilities + 5 June 2014 + [USN-2234-1](https://usn.ubuntu.com/USN-2234-1) + Linux kernel (EC2) vulnerabilities + 5 June 2014 + [USN-2238-1](https://usn.ubuntu.com/USN-2238-1) + Linux kernel (Raring HWE) vulnerabilities + 5 June 2014 + [USN-2239-1](https://usn.ubuntu.com/USN-2239-1) + Linux kernel (Saucy HWE) vulnerabilities + 5 June 2014 + [USN-2233-1](https://usn.ubuntu.com/USN-2233-1) + Linux kernel vulnerabilities + 5 June 2014 + [USN-2241-1](https://usn.ubuntu.com/USN-2241-1) + Linux kernel vulnerabilities + 5 June 2014 ### Other references * *