CVEvulnerability
CVE-2014-9322
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-12-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-269
Description
arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.
Affected configurations
• linux linux kernel (< 3.2.65)
• linux linux kernel (>= 3.3 < 3.4.106)
• linux linux kernel (>= 3.5 < 3.10.62)
• linux linux kernel (>= 3.11 < 3.12.35)
• linux linux kernel (>= 3.13 < 3.14.26)
• linux linux kernel (>= 3.15 < 3.16.35)
• linux linux kernel (>= 3.17 < 3.17.5)
• redhat enterprise linux eus 5.6
• canonical ubuntu linux 10.04
• opensuse evergreen 11.4
• suse suse linux enterprise server 10
• google android 6.0
• google android 6.0.1
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f442be2fb22be02cafa606f1769fa1e6f894441 git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=142722450701342&w=2 Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=142722544401658&w=2 Mailing List, Third Party Advisory
- http://osvdb.org/show/osvdb/115919 Broken Link
- http://rhn.redhat.com/errata/RHSA-2014-1998.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-2008.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-2028.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-2031.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0009.html Third Party Advisory
- http://secunia.com/advisories/62336 Broken Link
- http://source.android.com/security/bulletin/2016-04-02.html Patch, Third Party Advisory
- http://www.exploit-db.com/exploits/36266 Exploit, Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2014/12/15/6 Mailing List, Patch, Third Party Advisory
- http://www.ubuntu.com/usn/USN-2491-1 Third Party Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-16-170 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1172806 Issue Tracking, Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441 Patch, Third Party Advisory
- https://help.joyent.com/entries/98788667-Security-Advisory-ZDI-CAN-3263-ZDI-CAN-3284-and-ZDI-CAN-3364-Vulnerabilities Permissions Required, Third Party Advisory
- https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.5 Mailing List, Patch, Vendor Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f442be2fb22be02cafa606f1769fa1e6f894441 git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=142722450701342&w=2 Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=142722544401658&w=2 Mailing List, Third Party Advisory
- http://osvdb.org/show/osvdb/115919 Broken Link
- http://rhn.redhat.com/errata/RHSA-2014-1998.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-2008.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-2028.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-2031.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0009.html Third Party Advisory
- http://secunia.com/advisories/62336 Broken Link
- http://source.android.com/security/bulletin/2016-04-02.html Patch, Third Party Advisory
- http://www.exploit-db.com/exploits/36266 Exploit, Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2014/12/15/6 Mailing List, Patch, Third Party Advisory
- http://www.ubuntu.com/usn/USN-2491-1 Third Party Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-16-170 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1172806 Issue Tracking, Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441 Patch, Third Party Advisory
- https://help.joyent.com/entries/98788667-Security-Advisory-ZDI-CAN-3263-ZDI-CAN-3284-and-ZDI-CAN-3364-Vulnerabilities Permissions Required, Third Party Advisory
- https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.5 Mailing List, Patch, Vendor Advisory