CVE-2014-0206
kernel: aio: insufficient sanitization of head in aio_read_events_ring()
Severity
ModerateRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · June 24, 2014
Updated · November 21, 2025
Description
Array index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value.
Statement
This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 4AV:L/AC:H/Au:N/C:N/I:N/A:C
CWE not specified