Vulnerability · CVE-2014-0196
Linux Kernel Race Condition Vulnerability
Published May 7, 2014 · catalog updated Jun 16, 2026 · Linux Kernel
Patch now
CVE-2014-0196 is in the CISA known-exploited catalog, due Jun 2, 2023. Confirm Linux Kernel against the vendor advisory and apply that fix. The CVSS score does not change the priority.
- Severity
- Medium5.5
- Known exploitation
- CISA KEV and VulnCheck KEV
- EPSS
- 22.48%
- Remediation
- Remediation guidance
- Affected products
- cpe debian/debian linux · cpe linux/linux kernel · cpe oracle/linux · cpe redhat/enterprise linux · cpe suse/suse linux enterprise desktop · vendor Linux Kernel
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
Are you affected?
Enter the version you run. The result uses only the ranges stored on this record.
The check returns affected, not affected, or incomplete. It does not guess a version that is missing from the record.
- cpe debian/debian linux6.0
- cpe linux/linux kernel2.6.31
- cpe oracle/linux6
- cpe redhat/enterprise linux6.0
- cpe suse/suse linux enterprise desktop11
- vendor Linux Kernelversion unspecified
- vendor n/a n/aversion unspecified
How to fix CVE-2014-0196
Recommended remediation
The impacted product is end-of-life and should be disconnected if still in use. CISA due date Jun 2, 2023.
Official advisories
What to do
Three questions, each answered from this record only. Confirm the vendor advisory before you patch.
Should you patch?
CVE-2014-0196 is in the CISA known-exploited catalog, due Jun 2, 2023. Confirm Linux Kernel against the vendor advisory and apply that fix. The CVSS score does not change the priority.
Which versions are affected?
Compare what you have installed with debian/debian linux 6.0; linux/linux kernel 2.6.31; redhat/enterprise linux 6.0; suse/suse linux enterprise desktop 11. The impacted product is end-of-life and should be disconnected if still in use.
What should an analyst verify?
CWE-362: Race Condition. EPSS 22.48%. The CISA KEV listing is the exploitation evidence. A public exploit reference is linked in Sources. That is not the same as confirmed exploitation. Use the source links for the original advisory.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
May 7, 2014 · Catalog
Detected
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
May 12, 2023 · CISA KEV
Known exploited
The impacted product is end-of-life and should be disconnected if still in use.
Jun 2, 2023 · CISA KEV
Remediation due
The impacted product is end-of-life and should be disconnected if still in use.
Jun 16, 2026 · Catalog
Updated
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
Sources
- CISA KEVConfirmed exploitationCVE-2014-0196
Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.
cisa.gov - CVE.orgVulnerability recordCVE-2014-0196
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering
cve.org - FIRST EPSSExploitation probabilityCVE-2014-0196
30-day exploitation probability 22.5%
first.org - Exploit DatabasePublic exploit reference33516
Public archive entry. The exploit body is not stored here.
exploit-db.com - NIST NVDVulnerability recordCVE-2014-0196
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering
nvd.nist.gov - VulnCheck KEVConfirmed exploitationCVE-2014-0196
Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.
vulncheck.com
References
- Issue Tracking · bugzilla.novell.com
- Broken Link · git.kernel.org
- Third Party Advisory · linux.oracle.com
- Mailing List · lists.opensuse.org
- Mailing List · lists.opensuse.org
- Exploit · pastebin.com
- Third Party Advisory · rhn.redhat.com
- Not Applicable · secunia.com
- 59262 · secunia.com
- Reference · support.f5.com
- [oss-security] 20140429 CVE-2014-0196: Linux kernel pty layer race condition mem · openwall.com
- 106646 · osvdb.org
- USN-2203-1 · ubuntu.com
- USN-2204-1 · ubuntu.com
- CISA note · lkml.iu.edu
- CISA note · nvd.nist.gov
- VulnCheck exploitation evidence · cisa.gov
Freshness
Last verified in this catalog Oct 17, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.