Evidence dossier

CVE-2014-0196

CVE-2014-0196

63.2–81.7Priority evidence range

As known Jul 19, 2026, 5:00 AM UTCgen-56ccdaf9

Normalized restatement

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

State: PUBLISHED
Published: May 7, 2014
Updated: Oct 22, 2025
Evidence coverage: 72%

CISA KEVCatalog member

The impacted product is end-of-life and should be disconnected if still in use.

FIRST EPSS22.48%

2026-07-18 · v2026.06.15 · percentile 97.4%

Source stateConflict visible

Distinct CVSS assessments remain side by side; none are averaged.

Source comparison

Who said what

CISA-ADPindependent enrichment

container

CISA ADP Vulnrichment

Jul 19, 2026Original evidence ↗

CVEderivative copy

container

CVE Program Container

Jul 19, 2026Original evidence ↗

redhatoriginal assertion

container

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

Jul 19, 2026Original evidence ↗

CISA KEVoriginal assertion

observed_exploitation

Linux Kernel Race Condition Vulnerability

Jul 19, 2026Original evidence ↗

FIRST EPSSoriginal assertion

model_probability

Probability 0.224750000000; percentile 0.974430000000

Jul 19, 2026Original evidence ↗

Applicability

Cited product scope

Trace impact →

n/an/a

[{"status": "affected", "version": "n/a"}]unknown

Unknown vendorUnknown product

cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*; start including 11.1.0; end including 11.5.1supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*; start including 11.3.0; end including 11.5.1supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*; start including 11.1.0; end including 11.5.1supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*; start including 11.4.0; end including 11.5.1supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*; start including 11.1.0; end including 11.5.1supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*; start including 11.1.0; end including 11.3.0supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*; start including 11.1.0; end including 11.5.1supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*; start including 11.1.0; end including 11.5.1supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*; start including 11.1.0; end including 11.5.1supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*; start including 11.3.0; end including 11.5.1supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:*; start including 11.1.0; end including 11.4.1supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:*; start including 11.1.0; end including 11.3.0supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*; start including 11.1.0; end including 11.3.0supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-iq_application_delivery_controller:4.5.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-iq_cloud:*:*:*:*:*:*:*:*; start including 4.0.0; end including 4.5.0supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-iq_device:*:*:*:*:*:*:*:*; start including 4.2.0; end including 4.5.0supported

Unknown vendorUnknown product

cpe:2.3:a:f5:big-iq_security:*:*:*:*:*:*:*:*; start including 4.0.0; end including 4.5.0supported

Unknown vendorUnknown product

cpe:2.3:a:f5:enterprise_manager:3.1.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; start excluding 2.6.31; end excluding 3.2.59supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; start including 3.3; end excluding 3.4.91supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; start including 3.5; end excluding 3.10.40supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; start including 3.11; end excluding 3.12.20supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; start including 3.13; end excluding 3.14.4supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:2.6.31:-:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:2.6.31:rc9:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_eus:6.4:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_server_eus:6.3:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3:*:*:*:-:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension:11:sp3:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:-:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:vmware:*:*supported

Assessments

CVSS by origin

6.9

nvd@nist.govCVSS 2.0 · role PrimaryAV:L/AC:M/Au:N/C:C/I:C/A:C

5.5

134c704f-9b21-4f2e-91b3-4a467353bcc0CVSS 3.1 · role SecondaryCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.5

CISA-ADPCVSS 3.1 · role unknownCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Limitations and unknowns

KEV membership is authoritative for the catalog, not proof of exposure in any environment.
EPSS is a dated model probability and not an individual-environment prediction.
Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
NVD-carried upstream facts remain derivative and are not independent corroboration.
Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
Factor D is unknown in Public Core because no accepted canonical mapping-obligation ledger is present.
Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.