CVE-2014-3917: kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain sysca...

Security readout for executives and security teams

CVE-2014-3917 is a Linux kernel audit subsystem flaw. A local user could trigger a kernel crash or infer potentially sensitive one-bit kernel memory values when syscall auditing is enabled with certain rules. This is mainly an endpoint/server hardening and availability issue, not a remote compromise based on the provided sources. Exposure is most likely on older Linux systems running affected kernels with CONFIG_AUDITSYSCALL enabled and syscall audit rules configured. Systems without local untrusted users or without syscall auditing are less exposed, based on the description. Treat as a moderate legacy Linux risk. It can affect availability and leak very limited kernel information, but the provided evidence indicates local access is required and does not show active exploitation. Mitigation focus: Apply relevant vendor kernel security updates from Ubuntu, Red Hat, or SUSE guidance.; Upgrade kernels beyond affected Linux versions through 3.14.5.; Review whether syscall audit rules are required on legacy systems..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.