QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2014-9322

Back to search

CVE-2014-9322

Published: Dec 17, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.

VendorProductVersions

n/a

n/a

affected
n/a

References

USN-2491-1
vendor-advisory
x_refsource_UBUNTU
HPSBGN03285
vendor-advisory
x_refsource_HP
SUSE-SU-2015:0736
vendor-advisory
x_refsource_SUSE
RHSA-2015:0009
vendor-advisory
x_refsource_REDHAT
HPSBGN03282
vendor-advisory
x_refsource_HP
openSUSE-SU-2015:0566
vendor-advisory
x_refsource_SUSE
RHSA-2014:2008
vendor-advisory
x_refsource_REDHAT
62336
third-party-advisory
x_refsource_SECUNIA
RHSA-2014:1998
vendor-advisory
x_refsource_REDHAT
36266
exploit
x_refsource_EXPLOIT-DB
RHSA-2014:2028
vendor-advisory
x_refsource_REDHAT
RHSA-2014:2031
vendor-advisory
x_refsource_REDHAT
115919
vdb-entry
x_refsource_OSVDB
SUSE-SU-2015:0812
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now