Vulnerability Database

314,452

Total vulnerabilities in the database

CVE-2014-7825

kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service (out-of-bounds read and OOPS) or bypass the ASLR protection mechanism via a crafted application.

  • Published: Nov 10, 2014
  • Updated: Nov 9, 2025
  • CVE: CVE-2014-7825
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
linux / linux_kernel 3.15 3.16.35
linux / linux_kernel 2.6.32 3.2.65
linux / linux_kernel 3.3 3.4.106
linux / linux_kernel 3.5 3.10.60
linux / linux_kernel 3.11 3.12.33
linux / linux_kernel 3.13 3.14.24
linux / linux_kernel 3.17 3.17.3