CVE-2014-3631

CVE-2014-3631 describes a denial-of-service vulnerability in the Linux kernel's associative-array implementation (lib/assoc_array.c) affecting versions prior to 3.16.3. A local attacker can trigger a NULL pointer dereference and system crash by performing specific keyctl operations. This vulnerability has a CVSS score of 7.2, indicating high severity due to its local attack vector, low complexity, and complete impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Proof-of-Concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.