peter bassill · operator
$ cve CVE-2014-9322 JSON

CVE-2014-9322 EXPLOIT

7.8
HIGH · CVSS 3.1 · EPSS 1.5% (pctl 74)

Patch early

A public exploit exists.

Description

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.

Scoring

CVSS7.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS1.54% — more likely to be exploited than 74% of all CVEs
WeaknessCWE-269
On CISA KEVno
Public exploityes
Published2014-12-17
Last modified2026-06-17

Affected (6)

VendorProduct
canonicalubuntu linux
googleandroid
linuxlinux kernel
opensuseevergreen
redhatenterprise linux eus
susesuse linux enterprise server

Public exploits

SourceTitleDate
exploit-dbLinux Kernel - 'BadIRET' Local Privilege Escalation2017-07-24
exploit-dbLinux Kernel 3.17.5 - IRET Instruction #SS Fault Handling Crash (PoC)2015-03-04

References

→ the Explorer  ·  watch your stack  ·  NVD