Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-9322

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.

Published

2014-12-17T11:59:02.383

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

3.9

Impact Score

10.0

Weaknesses

Type: Primary
CWE-269

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	linux	linux_kernel	< 3.2.65	Yes
Operating System	linux	linux_kernel	< 3.4.106	Yes
Operating System	linux	linux_kernel	< 3.10.62	Yes
Operating System	linux	linux_kernel	< 3.12.35	Yes
Operating System	linux	linux_kernel	< 3.14.26	Yes
Operating System	linux	linux_kernel	< 3.16.35	Yes
Operating System	linux	linux_kernel	< 3.17.5	Yes
Operating System	redhat	enterprise_linux_eus	5.6	Yes
Operating System	canonical	ubuntu_linux	10.04	Yes
Operating System	opensuse	evergreen	11.4	Yes
Operating System	suse	suse_linux_enterprise_server	10	Yes
Operating System	google	android	6.0	Yes
Operating System	google	android	6.0.1	Yes

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f442be2fb22be02cafa606f1769fa1e6f894441 ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html Mailing List, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=142722450701342&w=2 Mailing List, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=142722544401658&w=2 Mailing List, Third Party Advisory ([email protected])
http://osvdb.org/show/osvdb/115919 Broken Link ([email protected])
http://rhn.redhat.com/errata/RHSA-2014-1998.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2014-2008.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2014-2028.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2014-2031.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-0009.html Third Party Advisory ([email protected])
http://secunia.com/advisories/62336 Broken Link ([email protected])
http://source.android.com/security/bulletin/2016-04-02.html Patch, Third Party Advisory ([email protected])
http://www.exploit-db.com/exploits/36266 Exploit, Third Party Advisory, VDB Entry ([email protected])
http://www.openwall.com/lists/oss-security/2014/12/15/6 Mailing List, Patch, Third Party Advisory ([email protected])
http://www.ubuntu.com/usn/USN-2491-1 Third Party Advisory ([email protected])
http://www.zerodayinitiative.com/advisories/ZDI-16-170 Third Party Advisory, VDB Entry ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=1172806 Issue Tracking, Patch, Third Party Advisory ([email protected])
https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441 Patch, Third Party Advisory ([email protected])
https://help.joyent.com/entries/98788667-Security-Advisory-ZDI-CAN-3263-ZDI-CAN-3284-and-ZDI-CAN-3364-Vulnerabilities Permissions Required, Third Party Advisory ([email protected])
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.5 Mailing List, Patch, Vendor Advisory ([email protected])
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f442be2fb22be02cafa606f1769fa1e6f894441 (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=142722450701342&w=2 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=142722544401658&w=2 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/show/osvdb/115919 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2014-1998.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2014-2008.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2014-2028.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2014-2031.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-0009.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/62336 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://source.android.com/security/bulletin/2016-04-02.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.exploit-db.com/exploits/36266 Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2014/12/15/6 Mailing List, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-2491-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.zerodayinitiative.com/advisories/ZDI-16-170 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=1172806 Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://help.joyent.com/entries/98788667-Security-Advisory-ZDI-CAN-3263-ZDI-CAN-3284-and-ZDI-CAN-3364-Vulnerabilities Permissions Required, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.5 Mailing List, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)