CVE-2014-1874: The security_context_to_sid_core function in security/selinux/ss/services.c in the Linux kernel before 3.13...

Security readout for executives and security teams

CVE-2014-1874 is a Linux kernel SELinux flaw that can let a local user crash the system. It is not a remote takeover issue in the provided sources. The business risk is service interruption on affected Linux hosts, especially where privileged local users or services can exercise CAP_MAC_ADMIN. Exposure is most plausible on older Linux systems using vulnerable pre-3.13.4 kernels or vendor kernels not carrying the fix. Practical exposure also depends on SELinux use and whether local users, containers, or services have CAP_MAC_ADMIN. The provided data does not enumerate all affected distributions or products. Treat this as a targeted availability risk for legacy Linux systems, not an internet-scale emergency. Prioritize patching exposed production systems where local users or services have elevated MAC administration capability, and fold the rest into normal kernel maintenance if vendor fixes are already applied. Mitigation focus: Upgrade to Linux 3.13.4 or a vendor kernel carrying the referenced fix.; Apply relevant Ubuntu, Oracle, Red Hat, or distribution security advisories where applicable.; Reduce or remove CAP_MAC_ADMIN from users, services, and container profiles unless required..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.