What’s Vulnerable › Vulnerabilities

CVE-2014-5332

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2015-02-06 · updated 2026-06-17
• Weakness: CWE-362

Description

Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAP_IOC_CREATE IOCTL call, which triggers a use-after-free error, as demonstrated by using a race condition to escape the Chrome sandbox.

Affected products

• Linux kernel: 3.10

References

• http://googleprojectzero.blogspot.com/2015/01/exploiting-nvmap-to-escape-chrome.html
• http://nvidia.custhelp.com/app/answers/detail/a_id/3618
• http://googleprojectzero.blogspot.com/2015/01/exploiting-nvmap-to-escape-chrome.html
• http://nvidia.custhelp.com/app/answers/detail/a_id/3618

Get alerted when CVE-2014-5332 or the next vulnerability affects your stack