NetSight
IP …
medium6.9Public exploit code

CVE-2014-4699

The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system ca…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.17 before 3.2.61
from 3.3 before 3.4.97
from 3.5 before 3.10.47
from 3.11 before 3.12.25
from 3.13 before 3.14.11
from 3.15 before 3.15.4
DebianDebian Linux
Version 7.0
CanonicalUbuntu Linux
Versions 10.04, 12.04, 13.10, 14.04

Weakness classification

CWE-362

References