CVE-2014-8159: The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise...

Security readout for executives and security teams

This flaw lets a local user on certain Linux systems misuse InfiniBand user access to reach physical memory. The impact can be a system crash or privilege gain. It is not described as remote, but it matters on shared compute, HPC, virtualization, or any host where non-admin users can access InfiniBand devices. Exposure is most likely on Linux systems with InfiniBand enabled and uverbs device nodes accessible to local users. The bundle specifically names RHEL 6 before kernel 2.6.32-504.12.2 and also cites vendor advisories from Ubuntu, SUSE, Debian, Fedora, and Red Hat. Treat this as high priority for shared Linux infrastructure and HPC-like environments. It is less urgent for systems without InfiniBand or without local untrusted users. Patch during the next controlled kernel maintenance window, sooner where local multi-user access exists. Mitigation focus: Apply the relevant vendor kernel security update for each affected Linux distribution.; Prioritize shared systems where local users can access /dev/infiniband/ devices.; Review and restrict uverbs device permissions to trusted users only..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.