CVE-2014-9322

Published: Dec 17, 2014Modified: May 6, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.

Affected (13)

Products: Linux: Linux Kernel · Redhat: Enterprise Linux Eus · Canonical: Ubuntu Linux · +3 more

Show all products

Linux: Linux Kernel · Redhat: Enterprise Linux Eus · Canonical: Ubuntu Linux · Opensuse: Evergreen · Suse: Suse Linux Enterprise Server · Google: Android

1 product

1 product

1 product

1 product

1 product

Suse Linux Enterprise Server

Google

1 product

Android

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.2.65
Linux Linux Kernel	From 3.11 to 3.12.35
Linux Linux Kernel	From 3.13 to 3.14.26
Linux Linux Kernel	From 3.15 to 3.16.35
Linux Linux Kernel	From 3.17 to 3.17.5
Linux Linux Kernel	From 3.3 to 3.4.106
Linux Linux Kernel	From 3.5 to 3.10.62

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Eus	Version 5.6

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Evergreen	Version 11.4
Suse Suse Linux Enterprise Server	Version 10 sp4

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Google Android	Version 6.0.1
Google Android	Version 6.0

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (44)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f442be2fb22be02cafa606f1769fa1e6f894441

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=142722450701342&w=2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=142722544401658&w=2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://osvdb.org/show/osvdb/115919

Source: cve@mitre.org

Broken Link

http://rhn.redhat.com/errata/RHSA-2014-1998.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-2008.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-2028.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-2031.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0009.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/62336

Source: cve@mitre.org

Broken Link

http://source.android.com/security/bulletin/2016-04-02.html

Source: cve@mitre.org

PatchThird Party Advisory

http://www.exploit-db.com/exploits/36266

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://www.openwall.com/lists/oss-security/2014/12/15/6

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.ubuntu.com/usn/USN-2491-1

Source: cve@mitre.org

Third Party Advisory

http://www.zerodayinitiative.com/advisories/ZDI-16-170

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1172806

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441

Source: cve@mitre.org

PatchThird Party Advisory

https://help.joyent.com/entries/98788667-Security-Advisory-ZDI-CAN-3263-ZDI-CAN-3284-and-ZDI-CAN-3364-Vulnerabilities

Source: cve@mitre.org

Permissions RequiredThird Party Advisory

https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.5

Source: cve@mitre.org

Mailing ListPatchVendor Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f442be2fb22be02cafa606f1769fa1e6f894441