CVE-2014-1737: The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly...

Security readout for executives and security teams

CVE-2014-1737 is a local Linux kernel privilege-escalation issue in floppy-device handling. A user who can write to a /dev/fd device may be able to gain higher privileges. The bundle does not show remote exposure or active exploitation. Exposure is most likely on old or unpatched Linux systems with kernels at or before 3.14.3, or vendor kernels lacking the backported fix, where local users have write access to /dev/fd devices. Treat this as high priority for legacy Linux estates and shared systems. It is not described as remotely exploitable, but successful abuse could turn a low-privileged local account into full system control. Mitigation focus: Apply the relevant vendor kernel security update for each affected Linux distribution.; Verify whether the upstream fix was backported into deployed vendor kernels.; Restrict unnecessary local access to floppy device nodes where operationally possible..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.