NetSight
IP …
high7.8Public exploit code

CVE-2014-9322

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which all…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.65
from 3.3 before 3.4.106
from 3.5 before 3.10.62
from 3.11 before 3.12.35
from 3.13 before 3.14.26
from 3.15 before 3.16.35
RedhatEnterprise Linux Eus
Version 5.6
CanonicalUbuntu Linux
Version 10.04
OpensuseEvergreen
Version 11.4
SuseSuse Linux Enterprise Server
Version 10
GoogleAndroid
Versions 6.0, 6.0.1

Weakness classification

CWE-269

References