The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-7421
