← Global Threat Landscape

CVE-2014-3153

Critical

91.1

RPS

Description

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

Source: NVD

Signals

CVSS
7.8
High · v3.1
EPSS
37.23%
Probability of exploitation in the next 30 days (FIRST)
CISA KEV
In CISA KEV since May 2022
Fix commit
Fix commit known
Sources: MoreFixes, FreshFixes
Weakness
Not mapped
Published
7 Jun 2014
Last modified 21 Apr 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2014-3153

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 7 Oct 2026, 05:16 UK time

CVE-2014-3153 · RPS 91.1 · DevSecure Intelligence