CVE-2014-8159

CVE-2014-8159 describes a privilege escalation and denial-of-service vulnerability in the InfiniBand (IB) implementation of the Linux kernel, specifically affecting Red Hat Enterprise Linux 6 before version 2.6.32-504.12.2, as well as other Debian and Ubuntu Linux distributions. The flaw allows local users with permissions on a uverbs device to register arbitrary memory regions, leading to access to physical memory. This can result in a system crash or privilege escalation. With a CVSS score of 6.9, this vulnerability is of medium severity, requiring local access and medium attack complexity, but with high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.