High 7.8Known exploited (CISA KEV)Published Jun 7, 2014

CVE-2014-3153The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafte…

Updated under an hour ago (2026-10-19 05:50 UTC)

Does this affect you?

It affects linux_kernel and 8 other products. Add what you run to find out whether that includes you.

CISA lists it as known exploited since May 25, 2022; federal agencies had to remediate by Jun 15, 2022. Treat that date as your deadline.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for linux_kernel

Exploited in the last 30 days

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

CVSS: 7.8 HIGH (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Added to CISA KEV May 25, 2022; federal remediation due Jun 15, 2022Apply updates per vendor instructions.
EPSS (exploitation in the next 30 days): 37.23% (percentile 99)
Assigned by: Chrome
NVD analysis: Analyzed
Record last updated: Oct 22, 2025
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

linux linux_kernel linux:linux_kernel	before 3.2.60; from 3.3 before 3.4.92; from 3.5 before 3.10.42; from 3.11 before 3.12.22; from 3.13 before 3.14.6	NVD
redhat enterprise_linux_server_aus redhat:enterprise_linux_server_aus	6.2	NVD
opensuse opensuse opensuse:opensuse	11.4	NVD
suse linux_enterprise_desktop suse:linux_enterprise_desktop	11	NVD
suse linux_enterprise_high_availability_extension suse:linux_enterprise_high_availability_extension	11	NVD
suse linux_enterprise_real_time_extension suse:linux_enterprise_real_time_extension	11	NVD
suse linux_enterprise_server suse:linux_enterprise_server	11; 11; 11; 11	NVD
canonical ubuntu_linux canonical:ubuntu_linux	12.04; 14.04	NVD
oracle linux oracle:linux	5; 6	NVD

References

http://www.securityfocus.com/bid/67906vdb-entry, x-refsource-bid
http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00006.htmlvendor-advisory, x-refsource-suse, mailing-list, third-party-advisory
http://openwall.com/lists/oss-security/2014/06/05/24mailing-list, x-refsource-mlist
http://secunia.com/advisories/59029third-party-advisory, x-refsource-secunia, broken-link
http://www.debian.org/security/2014/dsa-2949vendor-advisory, x-refsource-debian, exploit
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.htmlvendor-advisory, x-refsource-suse, mailing-list, third-party-advisory
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00018.htmlvendor-advisory, x-refsource-suse, mailing-list, third-party-advisory
http://secunia.com/advisories/59262third-party-advisory, x-refsource-secunia, broken-link
http://secunia.com/advisories/58990third-party-advisory, x-refsource-secunia, broken-link
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5ex-refsource-confirm
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a217887a7b658e2650c3feff22756ab80c7339x-refsource-confirm
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e9c243a5a6de0be8e584c604d353412584b592f8x-refsource-confirm, broken-link
http://linux.oracle.com/errata/ELSA-2014-3037.htmlx-refsource-confirm, third-party-advisory
http://secunia.com/advisories/59153third-party-advisory, x-refsource-secunia, broken-link
http://openwall.com/lists/oss-security/2014/06/06/20mailing-list, x-refsource-mlist
http://secunia.com/advisories/59309third-party-advisory, x-refsource-secunia, broken-link
https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353412584b592f8x-refsource-confirm
http://www.securitytracker.com/id/1030451vdb-entry, x-refsource-sectrack
http://linux.oracle.com/errata/ELSA-2014-0771.htmlx-refsource-confirm, third-party-advisory
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00014.htmlvendor-advisory, x-refsource-suse, mailing-list, third-party-advisory
http://rhn.redhat.com/errata/RHSA-2014-0800.htmlvendor-advisory, x-refsource-redhat, third-party-advisory
http://www.ubuntu.com/usn/USN-2237-1vendor-advisory, x-refsource-ubuntu
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.htmlvendor-advisory, x-refsource-suse, mailing-list, third-party-advisory
http://linux.oracle.com/errata/ELSA-2014-3039.htmlx-refsource-confirm, third-party-advisory
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270x-refsource-confirm
http://linux.oracle.com/errata/ELSA-2014-3038.htmlthird-party-advisory
http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00025.htmlmailing-list, third-party-advisory
http://secunia.com/advisories/58500broken-link
http://secunia.com/advisories/59092broken-link
http://secunia.com/advisories/59386broken-link
http://secunia.com/advisories/59599broken-link
http://www.exploit-db.com/exploits/35370third-party-advisory, vdb-entry

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.