CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain p...

Security readout for executives and security teams

CVE-2014-4943 is a Linux kernel local privilege escalation issue in PPP over L2TP handling. A person or process that already has local access could potentially move to higher privileges on affected kernels. The provided sources do not describe remote exploitation. Exposure is most likely on older Linux systems, or vendor kernels with vulnerable PPPoL2TP code, where untrusted local users or workloads can execute code. Prioritize remediation where attackers may already have local code execution, because this issue can convert limited access into higher privileges. Internet-only systems without local user access are lower urgency. Mitigation focus: Apply vendor kernel updates from Red Hat, SUSE, Oracle, or the relevant Linux distribution.; Confirm whether the upstream fix commit is included or backported in deployed kernels.; Prioritize multi-user, shared hosting, VPN, and workload-isolation environments..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.