What’s Vulnerable › Vulnerabilities

CVE-2014-9322

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-12-17 · updated 2026-06-17
• Weakness: CWE-269

Description

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.

Affected products

• Canonical Ubuntu Linux: 10.04
• Android: 6.0, 6.0.1
• Linux kernel: before 3.2.65; from 3.3 before 3.4.106; from 3.5 before 3.10.62; from 3.11 before 3.12.35; from 3.13 before 3.14.26; from 3.15 before 3.16.35 — fixed in 3.10.62, 3.12.35, 3.14.26, 3.16.35, 3.17.5, 3.2.65
• openSUSE Evergreen: 11.4
• RedHat Enterprise Linux Eus: 5.6
• SUSE Linux Enterprise: 10-sp4

How to fix

Upgrade to a fixed version: Linux kernel 3.10.62, 3.12.35, 3.14.26, 3.16.35. Check the vendor advisory for mitigations.

References

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f442be2fb22be02cafa606f1769fa1e6f894441
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
• http://marc.info/?l=bugtraq&m=142722450701342&w=2
• http://marc.info/?l=bugtraq&m=142722544401658&w=2
• http://osvdb.org/show/osvdb/115919
• http://rhn.redhat.com/errata/RHSA-2014-1998.html
• http://rhn.redhat.com/errata/RHSA-2014-2008.html
• http://rhn.redhat.com/errata/RHSA-2014-2028.html
• http://rhn.redhat.com/errata/RHSA-2014-2031.html
• http://rhn.redhat.com/errata/RHSA-2015-0009.html

Get alerted when CVE-2014-9322 or the next vulnerability affects your stack