ZeroDay Findings
Sign inSign up

Findings

CVE-2014-0196

Linux Kernel Race Condition Vulnerability

Published May 7, 2014 · updated Jun 16, 2026 · linux linux kernel

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

Timeline

Detection, updates, and resolution for this record.

  1. May 7, 2014 · Catalog

    Detected

    The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

  2. May 12, 2023 · CISA KEV

    Known exploited

    The impacted product is end-of-life and should be disconnected if still in use.

  3. Jun 2, 2023 · CISA KEV

    Remediation due

    The impacted product is end-of-life and should be disconnected if still in use.

  4. Jun 16, 2026 · Catalog

    Updated

    The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

CISA due date Jun 2, 2023

Affected

  • cpe debian/debian linux6.0
  • cpe linux/linux kernelversion unspecified
  • cpe linux/linux kernel2.6.31
  • cpe oracle/linux6
  • cpe redhat/enterprise linux6.0
  • cpe suse/suse linux enterprise desktop11
  • vendor Linux Kernelversion unspecified

Sources

  • CISA KEVCVE-2014-0196

    Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.

    cisa.gov
  • CVE.orgCVE-2014-0196

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2014-0196

    30-day exploitation probability 22.5%

    first.org
  • Exploit Database33516

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2014-0196

    The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering

    nvd.nist.gov

References