CVE-2014-3153

Confirmed PUBLISHED

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses,...

Linux · Linux Kernel

Exploited in the wild PoC available

Recommended Action

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.

View KEV Feed Talk to Sales

Confidence

Confirmed

Exploitation Status

Exploited in the wild

Observed in Sensors

Attempts (30d)

—

Unique Attacker IPs

—

CISA KEV

In CISA KEV

CVSS / EPSS

7.8 High

At a Glance

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

linux cisa metasploit

CVE Published: Jun 07, 2014
Exploitation Reported: May 25, 2022
CVSS: 7.8 High
EPSS: —

Low complexity No user interaction

Affected Versions

Vendor	Product	Version	Status
n/a	n/a	n/a	Affected

CVE References

openSUSE-SU-2014:0878 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00006...
DSA-2949 debian.org · Vendor Advisory http://www.debian.org/security/2014/dsa-2949
SUSE-SU-2014:1316 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006...
SUSE-SU-2014:0796 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00018...
SUSE-SU-2014:0775 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00014...

Show 34 more references

RHSA-2014:0800 rhn.redhat.com · Vendor Advisory http://rhn.redhat.com/errata/RHSA-2014-0800.html
USN-2237-1 ubuntu.com · Vendor Advisory http://www.ubuntu.com/usn/USN-2237-1
SUSE-SU-2014:1319 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007...
USN-2240-1 ubuntu.com · Vendor Advisory http://www.ubuntu.com/usn/USN-2240-1
SUSE-SU-2014:0837 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00025...
59029 secunia.com · Third-Party Advisory http://secunia.com/advisories/59029
59262 secunia.com · Third-Party Advisory http://secunia.com/advisories/59262
58990 secunia.com · Third-Party Advisory http://secunia.com/advisories/58990
59153 secunia.com · Third-Party Advisory http://secunia.com/advisories/59153
59309 secunia.com · Third-Party Advisory http://secunia.com/advisories/59309
58500 secunia.com · Third-Party Advisory http://secunia.com/advisories/58500
59386 secunia.com · Third-Party Advisory http://secunia.com/advisories/59386
59599 secunia.com · Third-Party Advisory http://secunia.com/advisories/59599
59092 secunia.com · Third-Party Advisory http://secunia.com/advisories/59092
35370 exploit-db.com · Exploit http://www.exploit-db.com/exploits/35370
67906 securityfocus.com · VDB Entry http://www.securityfocus.com/bid/67906
1030451 securitytracker.com · VDB Entry http://www.securitytracker.com/id/1030451
[oss-security] 20140605 Re: Linux kernel futex local privilege escalation (CVE-2014-3153) openwall.com · Mailing List http://openwall.com/lists/oss-security/2014/06/05/24
[oss-security] 20140606 Re: Linux kernel futex local privilege escalation (CVE-2014-3153) openwall.com · Mailing List http://openwall.com/lists/oss-security/2014/06/06/20
[oss-security] 20140605 Linux kernel futex local privilege escalation (CVE-2014-3153) openwall.com · Mailing List http://www.openwall.com/lists/oss-security/2014/06/05/22
[oss-security] 20210201 Re: Linux Kernel: local priv escalation via futexes openwall.com · Mailing List http://www.openwall.com/lists/oss-security/2021/02/01/4
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit git.kernel.org · CVE Record https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commi...
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit git.kernel.org · CVE Record https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commi...
git.kernel.org git.kernel.org · CVE Record http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=...
linux.oracle.com/errata/ELSA-2014-3037.html linux.oracle.com · CVE Record http://linux.oracle.com/errata/ELSA-2014-3037.html
GitHub — torvalds/linux github.com · CVE Record https://github.com/torvalds/linux/commit/e9c243a5a6de0be8e584c604d353...
linux.oracle.com/errata/ELSA-2014-0771.html linux.oracle.com · CVE Record http://linux.oracle.com/errata/ELSA-2014-0771.html
linux.oracle.com/errata/ELSA-2014-3039.html linux.oracle.com · CVE Record http://linux.oracle.com/errata/ELSA-2014-3039.html
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit git.kernel.org · CVE Record https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commi...
bugzilla.redhat.com/show_bug.cgi bugzilla.redhat.com · CVE Record https://bugzilla.redhat.com/show_bug.cgi?id=1103626
linux.oracle.com/errata/ELSA-2014-3038.html linux.oracle.com · CVE Record http://linux.oracle.com/errata/ELSA-2014-3038.html
OSS-Security Mailing List openwall.com · CVE Record https://www.openwall.com/lists/oss-security/2021/02/01/4
elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html elongl.github.io · CVE Record https://elongl.github.io/exploitation/2021/01/08/cve-2014-3153.html
GitHub — elongl/CVE-2014-3153 github.com · CVE Record https://github.com/elongl/CVE-2014-3153

Recommended Actions

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.
Check enrichment artifacts for scanner coverage and available PoCs before rolling remediation validation.
Use the Pro API to automate enrichment, telemetry, and workflow delivery for VM, SOC, and CTI pipelines.

Known Exploited Vulnerability Sources

Catalogues that list this CVE as a known exploited vulnerability.

Per-source evidence links for KEV attestations are available through the KEVIntel Pro API.

Learn about Pro API access

Source	Added
CISA First	2022-05-25 00:00 UTC

Scanner Artifacts

Nuclei and Metasploit references linked to this CVE.

Scanner	Reference	Detected
Metasploit	https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb	Apr 28, 2025

CVSS Scores

CVSS v3.1 7.8 High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 7.2 High

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitation Status

Exploited in the wild

Recorded 2022-05-25 00:00:00 UTC · CISA

Proof of concept available

Recorded 2014-07-24 13:28:00 UTC · GitHub

Scanner Integrations

Scanner	Reference	Detected
Metasploit	https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futex_requeue.rb	Apr 28, 2025

Potential Proof of Concepts

These PoCs are unverified and could contain malware. Use at your own risk.

c4mx/Linux-kernel-code-injection_CVE-2014-3153

github · Created 2022-02-01 09:54:52 UTC · 0 stars

Study on Linux kernel code injection via CVE-2014-3153 (Towelroot)

elongl/CVE-2014-3153

github · Created 2020-10-31 11:39:11 UTC · 11 stars

Exploiting CVE-2014-3153, AKA Towelroot.

c3c/CVE-2014-3153

github · Created 2016-05-29 18:39:15 UTC · 0 stars

towelroot

zerodavinci/CVE-2014-3153-exploit

github · Created 2015-11-08 09:40:59 UTC · 5 stars

My exploit for kernel exploitation

lieanu/CVE-2014-3153

github · Created 2015-01-12 16:53:09 UTC · 17 stars

cve2014-3153 exploit for ubuntu x86

timwr/CVE-2014-3153

github · Created 2014-07-24 13:28:00 UTC · 121 stars

CVE-2014-3153 aka towelroot

futex_requeue

metasploit · Created Unknown

Metasploit module for CVE-2014-3153

Automate This Intelligence with the Pro API

Confidence scoring, exploit status, sensor telemetry, PoCs, scanner integrations, mentions, and tags are available programmatically for VM, SOC, and CTI workflows.

View Pro Pricing View API Docs

Pro API Example

GET /api/v2/pro/kevs/CVE-2014-3153

{
  "cve_id": "CVE-2014-3153",
  "title": "The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14...",
  "affected_vendor": "Linux",
  "affected_product": "Linux Kernel",
  "affected_versions": [
    { "vendor": "...", "product": "...", "status": "affected", "display_label": "..." }
  ],
  "confidence": "Confirmed",
  "cvss_score": 7.8,
  "epss_score": null,
  "exploit_status": {
    "exploited_in_the_wild": true,
    "active_exploitation_observed": false
  },
  "sensor_telemetry": { "...": "Pro API fields" },
  "proof_of_concepts": [ "..." ],
  "scanner_integrations": [ "..." ]
}

The free JSON API returns basic KEV fields only. Confidence, telemetry, and artifact enrichment require Pro API access.

CVE-2014-3153

At a Glance

Affected Versions

CVE References

Recommended Actions

Known Exploited Vulnerability Sources

Scanner Artifacts

Virtual Patch

CVSS Scores

Exploitation Status

Scanner Integrations

Potential Proof of Concepts

Timeline

Automate This Intelligence with the Pro API