CVE-2014-3917

CVE-2014-3917 describes a vulnerability in the Linux kernel, specifically affecting systems with CONFIG_AUDITSYSCALL enabled and certain syscall rules configured, impacting distributions like Red Hat and SUSE. A local attacker can exploit this by providing a large syscall number, potentially leading to information disclosure of single-bit kernel memory values or a denial of service (OOPS). The severity is moderate, with a CVSS score indicating local access and medium attack complexity for partial confidentiality and availability impacts. There is no evidence of active exploitation, nor is exploit code publicly available through common platforms like Metasploit or ExploitDB, and it has received minimal community or media attention.