Wind River Support Network


SCP6-558 : Security Advisory - linux - CVE-2014-9644

Created: Mar 29, 2015    Updated: Dec 3, 2018
Resolved Date: May 25, 2015
Previous ID: LIN4-32379
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Kernel


The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421.

Other Downloads

Live chat