Back to CVE records
Medium 5.5Known exploited (CISA KEV)Published May 7, 2014
CVE-2014-0196The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial…
Updated under an hour ago ()
Does this affect you?
It affects linux_kernel and 29 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since May 12, 2023; federal agencies had to remediate by Jun 2, 2023. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
- CVSS
- 5.5 MEDIUM (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- CWE-362
- Known exploited
- Added to CISA KEV May 12, 2023; federal remediation due Jun 2, 2023The impacted product is end-of-life and should be disconnected if still in use.
- EPSS (exploitation in the next 30 days)
- 22.48% (percentile 98)
- Assigned by
- redhat
- NVD analysis
- Analyzed
- Record last updated
- Oct 22, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
linux linux_kernel linux:linux_kernel | after 2.6.31 before 3.2.59; from 3.3 before 3.4.91; from 3.5 before 3.10.40; from 3.11 before 3.12.20; from 3.13 before 3.14.4; 2.6.31; 2.6.31; 2.6.31; and 5 more ranges | NVD |
debian debian_linux debian:debian_linux | 6.0; 7.0 | NVD |
redhat enterprise_linux redhat:enterprise_linux | 6.0 | NVD |
redhat enterprise_linux_eus redhat:enterprise_linux_eus | 6.3; 6.4 | NVD |
redhat enterprise_linux_server_eus redhat:enterprise_linux_server_eus | 6.3 | NVD |
suse suse_linux_enterprise_desktop suse:suse_linux_enterprise_desktop | 11 | NVD |
suse suse_linux_enterprise_high_availability_extension suse:suse_linux_enterprise_high_availability_extension | 11 | NVD |
suse suse_linux_enterprise_server suse:suse_linux_enterprise_server | 11; 11 | NVD |
oracle linux oracle:linux | 6 | NVD |
canonical ubuntu_linux canonical:ubuntu_linux | 10.04; 12.04; 12.10; 13.10; 14.04 | NVD |
f5 big-ip_access_policy_manager f5:big-ip_access_policy_manager | from 11.1.0 through 11.5.1 | NVD |
f5 big-ip_advanced_firewall_manager f5:big-ip_advanced_firewall_manager | from 11.3.0 through 11.5.1 | NVD |
f5 big-ip_analytics f5:big-ip_analytics | from 11.1.0 through 11.5.1 | NVD |
f5 big-ip_application_acceleration_manager f5:big-ip_application_acceleration_manager | from 11.4.0 through 11.5.1 | NVD |
f5 big-ip_application_security_manager f5:big-ip_application_security_manager | from 11.1.0 through 11.5.1 | NVD |
f5 big-ip_edge_gateway f5:big-ip_edge_gateway | from 11.1.0 through 11.3.0 | NVD |
f5 big-ip_global_traffic_manager f5:big-ip_global_traffic_manager | from 11.1.0 through 11.5.1 | NVD |
f5 big-ip_link_controller f5:big-ip_link_controller | from 11.1.0 through 11.5.1 | NVD |
f5 big-ip_local_traffic_manager f5:big-ip_local_traffic_manager | from 11.1.0 through 11.5.1 | NVD |
f5 big-ip_policy_enforcement_manager f5:big-ip_policy_enforcement_manager | from 11.3.0 through 11.5.1 | NVD |
f5 big-ip_protocol_security_module f5:big-ip_protocol_security_module | from 11.1.0 through 11.4.1 | NVD |
f5 big-ip_wan_optimization_manager f5:big-ip_wan_optimization_manager | from 11.1.0 through 11.3.0 | NVD |
f5 big-ip_webaccelerator f5:big-ip_webaccelerator | from 11.1.0 through 11.3.0 | NVD |
f5 big-iq_application_delivery_controller f5:big-iq_application_delivery_controller | 4.5.0 | NVD |
f5 big-iq_centralized_management f5:big-iq_centralized_management | 4.6.0 | NVD |
f5 big-iq_cloud f5:big-iq_cloud | from 4.0.0 through 4.5.0 | NVD |
f5 big-iq_cloud_and_orchestration f5:big-iq_cloud_and_orchestration | 1.0.0 | NVD |
f5 big-iq_device f5:big-iq_device | from 4.2.0 through 4.5.0 | NVD |
f5 big-iq_security f5:big-iq_security | from 4.0.0 through 4.5.0 | NVD |
f5 enterprise_manager f5:enterprise_manager | 3.1.0; 3.1.1 | NVD |
References
- http://www.ubuntu.com/usn/USN-2203-1vendor-advisory, x-refsource-ubuntu, third-party-advisory
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.htmlx-refsource-confirm, third-party-advisory
- http://www.osvdb.org/106646vdb-entry, x-refsource-osvdb, broken-link
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.htmlvendor-advisory, x-refsource-suse, mailing-list, third-party-advisory
- http://www.openwall.com/lists/oss-security/2014/05/05/6mailing-list, x-refsource-mlist, third-party-advisory
- http://secunia.com/advisories/59262third-party-advisory, x-refsource-secunia, broken-link
- http://www.ubuntu.com/usn/USN-2204-1vendor-advisory, x-refsource-ubuntu
- http://secunia.com/advisories/59218third-party-advisory, x-refsource-secunia, not-applicable
- http://www.ubuntu.com/usn/USN-2202-1vendor-advisory, x-refsource-ubuntu, third-party-advisory
- http://www.exploit-db.com/exploits/33516exploit, x-refsource-exploit-db, third-party-advisory, vdb-entry
- http://www.debian.org/security/2014/dsa-2928vendor-advisory, x-refsource-debian, third-party-advisory
- http://www.ubuntu.com/usn/USN-2199-1vendor-advisory, x-refsource-ubuntu, third-party-advisory
- http://linux.oracle.com/errata/ELSA-2014-0771.htmlx-refsource-confirm, third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1094232x-refsource-confirm
- http://www.ubuntu.com/usn/USN-2197-1vendor-advisory, x-refsource-ubuntu, third-party-advisory
- http://source.android.com/security/bulletin/2016-07-01.htmlx-refsource-confirm, not-applicable
- http://rhn.redhat.com/errata/RHSA-2014-0512.htmlvendor-advisory, x-refsource-redhat, third-party-advisory
- http://secunia.com/advisories/59599third-party-advisory, x-refsource-secunia, broken-link
- http://www.debian.org/security/2014/dsa-2926vendor-advisory, x-refsource-debian, third-party-advisory
- https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00x-refsource-confirm
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.htmlvendor-advisory, x-refsource-suse, mailing-list, third-party-advisory
- http://pastebin.com/raw.php?i=yTSFUBgZx-refsource-misc, exploit, mailing-list, third-party-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00x-refsource-confirm, broken-link
- http://bugzilla.novell.com/show_bug.cgi?id=875690x-refsource-confirm, issue-tracking, permissions-required, third-party-advisory
- http://www.ubuntu.com/usn/USN-2198-1vendor-advisory, x-refsource-ubuntu, third-party-advisory
- http://www.ubuntu.com/usn/USN-2196-1third-party-advisory
- http://www.ubuntu.com/usn/USN-2200-1third-party-advisory
- http://www.ubuntu.com/usn/USN-2201-1third-party-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.