CVE-2014-2038: The nfs_can_extend_write function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a write del...

Security readout for executives and security teams

CVE-2014-2038 is an old Linux kernel NFS information leak. A local user with access to write and read files on an NFS filesystem could, in specific circumstances, cause kernel memory contents to appear in file data. The source bundle does not show remote exploitation or active exploitation. Likely exposure is legacy Linux systems running kernels before 3.13.3, or vendor kernels missing the referenced fix, where users can access writable NFS filesystems. The bundle does not identify precise affected distribution package versions beyond vendor advisories. Treat this as a legacy exposure issue, not an emergency based on current evidence. Patch affected systems during normal vulnerability cycles, with higher priority for shared servers, multi-user environments, and systems using writable NFS mounts. Mitigation focus: Update to a vendor kernel containing the upstream NFS fix.; Prioritize hosts offering local shell access and writable NFS mounts.; Consult Ubuntu, Red Hat, and kernel advisories for distribution-specific package guidance..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.