CVE-2014-3631

The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.16.3 does not properly implement garbage collection, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via multiple "keyctl newring" operations followed by a "keyctl timeout" operation.

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=95389b08d93d5c06ec63ab49bd732b0069b7c35eBroken Link
• http://osvdb.org/show/osvdb/111298Broken Link
• http://www.exploit-db.com/exploits/36268Third Party Advisory, VDB Entry
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.3Exploit
• http://www.securityfocus.com/bid/70095Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2378-1Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2379-1Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1140325Issue Tracking
• https://github.com/torvalds/linux/commit/95389b08d93d5c06ec63ab49bd732b0069b7c35eExploit
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=95389b08d93d5c06ec63ab49bd732b0069b7c35eBroken Link
• http://osvdb.org/show/osvdb/111298Broken Link
• http://www.exploit-db.com/exploits/36268Third Party Advisory, VDB Entry
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.3Exploit
• http://www.securityfocus.com/bid/70095Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2378-1Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2379-1Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1140325Issue Tracking
• https://github.com/torvalds/linux/commit/95389b08d93d5c06ec63ab49bd732b0069b7c35eExploit

Published

Sep 28, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3625Directory traversal vulnerability in Pivotal Spring Framewor…
• CVE-2014-3626The Grails Resource Plugin often has to exchange URIs for re…
• CVE-2014-3627The YARN NodeManager daemon in Apache Hadoop 0.23.0 through …
• CVE-2014-3628Cross-site scripting (XSS) vulnerability in the Admin UI Plu…
• CVE-2014-3629XML external entity (XXE) vulnerability in the XML Exchange …
• CVE-2014-3630XML external entity (XXE) vulnerability in the Java XML proc…
• CVE-2014-3632The default configuration in a sudoers file in the Red Hat o…
• CVE-2014-3633The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c …
• CVE-2014-3634rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 a…
• CVE-2014-3635Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 …
• CVE-2014-3636D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8…
• CVE-2014-3637D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8…