Live › vulnerability › CVE-2014-0196
Go to dashboardA race condition in the Linux kernel n_tty_write function lets a local user crash the system or gain root privileges using long read and write operations. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
The impacted product is end-of-life and should be disconnected if still in use.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| linux kernel | vendor | > 2.6.31, < 3.2.59 | 3.2.59 |
| linux kernel | vendor | >= 3.3, < 3.4.91 | 3.4.91 |
| linux kernel | vendor | >= 3.5, < 3.10.40 | 3.10.40 |
| linux kernel | vendor | >= 3.11, < 3.12.20 | 3.12.20 |
| linux kernel | vendor | >= 3.13, < 3.14.4 | 3.14.4 |
| linux kernel | vendor | = 2.6.31 | – |
| debian linux | vendor | = 6.0 | – |
| debian linux | vendor | = 7.0 | – |
| redhat enterprise linux | vendor | = 6.0 | – |
| redhat enterprise linux eus | vendor | = 6.3 | – |
| redhat enterprise linux eus | vendor | = 6.4 | – |
| redhat enterprise linux server eus | vendor | = 6.3 | – |
| suse linux enterprise desktop | vendor | = 11 | – |
| suse linux enterprise high availability extension | vendor | = 11 | – |
| suse linux enterprise server | vendor | = 11 | – |
| oracle linux | vendor | = 6 | – |
| canonical ubuntu linux | vendor | = 10.04 | – |
| canonical ubuntu linux | vendor | = 12.04 | – |
| canonical ubuntu linux | vendor | = 12.10 | – |
| canonical ubuntu linux | vendor | = 13.10 | – |
| canonical ubuntu linux | vendor | = 14.04 | – |
| f5 big-ip access policy manager | vendor | >= 11.1.0, <= 11.5.1 | – |
| f5 big-ip advanced firewall manager | vendor | >= 11.3.0, <= 11.5.1 | – |
| f5 big-ip analytics | vendor | >= 11.1.0, <= 11.5.1 | – |
| f5 big-ip application acceleration manager | vendor | >= 11.4.0, <= 11.5.1 | – |
| f5 big-ip application security manager | vendor | >= 11.1.0, <= 11.5.1 | – |
| f5 big-ip edge gateway | vendor | >= 11.1.0, <= 11.3.0 | – |
| f5 big-ip global traffic manager | vendor | >= 11.1.0, <= 11.5.1 | – |
| f5 big-ip link controller | vendor | >= 11.1.0, <= 11.5.1 | – |
| f5 big-ip local traffic manager | vendor | >= 11.1.0, <= 11.5.1 | – |
| f5 big-ip policy enforcement manager | vendor | >= 11.3.0, <= 11.5.1 | – |
| f5 big-ip protocol security module | vendor | >= 11.1.0, <= 11.4.1 | – |
| f5 big-ip wan optimization manager | vendor | >= 11.1.0, <= 11.3.0 | – |
| f5 big-ip webaccelerator | vendor | >= 11.1.0, <= 11.3.0 | – |
| f5 big-iq application delivery controller | vendor | = 4.5.0 | – |
| f5 big-iq centralized management | vendor | = 4.6.0 | – |
| f5 big-iq cloud | vendor | >= 4.0.0, <= 4.5.0 | – |
| f5 big-iq cloud and orchestration | vendor | = 1.0.0 | – |
| f5 big-iq device | vendor | >= 4.2.0, <= 4.5.0 | – |
| f5 big-iq security | vendor | >= 4.0.0, <= 4.5.0 | – |
| Linux Kernel | vendor | – | – |
uname -r to see the running kernel version; compare against the kernel release that carries the 2014 n_tty fix (unknown from sources)
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
This page as .md · .json · in your agent: get_signal("CVE-2014-0196")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.