CVE-2014-3153VulnerabilityPublished 05/25/2022Updated 10/24/2026

CVE-2014-3153: Linux Kernel Privilege Escalation Vulnerability

Affects Linux KernelSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 05/25/2022
KEV deadline: 06/15/2022
EPSS: 37.2% chance of exploitation in 30 days – higher than 98% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2014-3153 (opens in a new tab)

Description

CVE-2014-3153 is a Linux kernel vulnerability in the futex_requeue function that allows local users to escalate privileges by exploiting improper checks on futex addresses. This flaw has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

Summary

The vulnerability exists in the futex_requeue function within kernel/futex.c of the Linux kernel. The function fails to ensure that the two futex addresses involved in the call are distinct, which can be leveraged by local users to gain elevated privileges on the system. This is a local privilege escalation vulnerability tracked as CVE-2014-3153 and is known to have been exploited in the wild.

Impact

Local users can exploit this vulnerability to escalate their privileges, potentially gaining unauthorized administrative access to the affected Linux system. This can lead to complete system compromise depending on the privileges obtained.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Linux vendor advisories for updates addressing CVE-2014-3153. Until a fix is applied, restrict local user access and consider applying any available kernel updates that may address this issue.

Weaknesses

CWE-269Improper Privilege Management (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:49:34 UTC

Weaknesses

References

Related threats