CVE-2014-0196

Confirmed PUBLISHED

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO &...

Linux · kernel

Exploited in the wild PoC available

Recommended Action

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.

View KEV Feed Talk to Sales

Confidence

Confirmed

Exploitation Status

Exploited in the wild

Observed in Sensors

Attempts (30d)

—

Unique Attacker IPs

—

CISA KEV

In CISA KEV

CVSS / EPSS

5.5 Medium

At a Glance

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

nessus_scanner cisa linux

CVE Published: May 07, 2014
Exploitation Reported: May 12, 2023
CVSS: 5.5 Medium
EPSS: —

Low complexity No user interaction

Affected Versions

Vendor	Product	Version	Status
n/a	n/a	n/a	Affected

CVE References

USN-2203-1 ubuntu.com · Vendor Advisory http://www.ubuntu.com/usn/USN-2203-1
SUSE-SU-2014:0683 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012...
USN-2204-1 ubuntu.com · Vendor Advisory http://www.ubuntu.com/usn/USN-2204-1
USN-2202-1 ubuntu.com · Vendor Advisory http://www.ubuntu.com/usn/USN-2202-1
DSA-2928 debian.org · Vendor Advisory http://www.debian.org/security/2014/dsa-2928

Show 23 more references

USN-2199-1 ubuntu.com · Vendor Advisory http://www.ubuntu.com/usn/USN-2199-1
USN-2197-1 ubuntu.com · Vendor Advisory http://www.ubuntu.com/usn/USN-2197-1
RHSA-2014:0512 rhn.redhat.com · Vendor Advisory http://rhn.redhat.com/errata/RHSA-2014-0512.html
DSA-2926 debian.org · Vendor Advisory http://www.debian.org/security/2014/dsa-2926
SUSE-SU-2014:0667 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007...
USN-2198-1 ubuntu.com · Vendor Advisory http://www.ubuntu.com/usn/USN-2198-1
USN-2200-1 ubuntu.com · Vendor Advisory http://www.ubuntu.com/usn/USN-2200-1
USN-2201-1 ubuntu.com · Vendor Advisory http://www.ubuntu.com/usn/USN-2201-1
USN-2196-1 ubuntu.com · Vendor Advisory http://www.ubuntu.com/usn/USN-2196-1
59262 secunia.com · Third-Party Advisory http://secunia.com/advisories/59262
59218 secunia.com · Third-Party Advisory http://secunia.com/advisories/59218
59599 secunia.com · Third-Party Advisory http://secunia.com/advisories/59599
33516 exploit-db.com · Exploit http://www.exploit-db.com/exploits/33516
106646 osvdb.org · VDB Entry http://www.osvdb.org/106646
[oss-security] 20140429 CVE-2014-0196: Linux kernel pty layer race condition memory corruption openwall.com · Mailing List http://www.openwall.com/lists/oss-security/2014/05/05/6
support.f5.com/kb/en-us/solutions/public/15000/300/sol15319... support.f5.com · CVE Record http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html
linux.oracle.com/errata/ELSA-2014-0771.html linux.oracle.com · CVE Record http://linux.oracle.com/errata/ELSA-2014-0771.html
bugzilla.redhat.com/show_bug.cgi bugzilla.redhat.com · CVE Record https://bugzilla.redhat.com/show_bug.cgi?id=1094232
source.android.com/security/bulletin/2016-07-01.html source.android.com · CVE Record http://source.android.com/security/bulletin/2016-07-01.html
GitHub — torvalds/linux github.com · CVE Record https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b744...
pastebin.com/raw.php pastebin.com · CVE Record http://pastebin.com/raw.php?i=yTSFUBgZ
git.kernel.org git.kernel.org · CVE Record http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=...
bugzilla.novell.com/show_bug.cgi bugzilla.novell.com · CVE Record http://bugzilla.novell.com/show_bug.cgi?id=875690

Recommended Actions

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.
Check enrichment artifacts for scanner coverage and available PoCs before rolling remediation validation.
Use the Pro API to automate enrichment, telemetry, and workflow delivery for VM, SOC, and CTI pipelines.

Known Exploited Vulnerability Sources

Catalogues that list this CVE as a known exploited vulnerability.

Per-source evidence links for KEV attestations are available through the KEVIntel Pro API.

Learn about Pro API access

Source	Added
CISA First	2023-05-12 00:00 UTC

CVSS Scores

CVSS v3.1 5.5 Medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0 6.9 Medium

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitation Status

Exploited in the wild

Recorded 2023-05-12 00:00:00 UTC · CISA

Proof of concept available

Recorded 2014-05-13 12:34:51 UTC · GitHub

Weaknesses (CWE)

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Scanner Integrations

Scanner	Reference	Detected
Nessus	https://www.tenable.com/plugins/nessus/124986	Jun 02, 2025

Potential Proof of Concepts

These PoCs are unverified and could contain malware. Use at your own risk.

tempbottle/CVE-2014-0196

github · Created 2014-12-17 07:39:00 UTC · 3 stars

CVE-2014-0196: Linux kernel pty layer race condition memory corruption

SunRain/CVE-2014-0196

github · Created 2014-05-13 12:34:51 UTC · 0 stars

Automate This Intelligence with the Pro API

Confidence scoring, exploit status, sensor telemetry, PoCs, scanner integrations, mentions, and tags are available programmatically for VM, SOC, and CTI workflows.

View Pro Pricing View API Docs

Pro API Example

GET /api/v2/pro/kevs/CVE-2014-0196

{
  "cve_id": "CVE-2014-0196",
  "title": "The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3...",
  "affected_vendor": "Linux",
  "affected_product": "kernel",
  "affected_versions": [
    { "vendor": "...", "product": "...", "status": "affected", "display_label": "..." }
  ],
  "confidence": "Confirmed",
  "cvss_score": 5.5,
  "epss_score": null,
  "exploit_status": {
    "exploited_in_the_wild": true,
    "active_exploitation_observed": false
  },
  "sensor_telemetry": { "...": "Pro API fields" },
  "proof_of_concepts": [ "..." ],
  "scanner_integrations": [ "..." ]
}

The free JSON API returns basic KEV fields only. Confidence, telemetry, and artifact enrichment require Pro API access.

CVE-2014-0196

At a Glance

Affected Versions

CVE References

Recommended Actions

Known Exploited Vulnerability Sources

Virtual Patch

CVSS Scores

Exploitation Status

Weaknesses (CWE)

Scanner Integrations

Potential Proof of Concepts

Timeline

Automate This Intelligence with the Pro API