CVE-2014-0055

CVE-2014-0055 is a medium-severity vulnerability in Redhat Enterprise Linux with a CVSS 2.0 base score of 5.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Description

The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors.

Frequently asked questions

What is CVE-2014-0055?
The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors.
How severe is CVE-2014-0055?
CVE-2014-0055 has a CVSS 2.0 base score of 5.5, rated medium severity.
Is CVE-2014-0055 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (45th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2014-0055?
CVE-2014-0055 affects Redhat Enterprise Linux. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2014-0055?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2014-0055 published?
CVE-2014-0055 was published on 2014-03-26 and last updated on 2026-06-17.

References

Affected products (1)

More vulnerabilities in Redhat Enterprise Linux

All CVEs affecting Redhat Enterprise Linux →