arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-firmwareUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-PAE-develUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade kernel-tools-libs-devel | Dec 1, 2016 | Dec 17, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 17, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 16, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 22, 2024 | Dec 15, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-ec2 | Dec 18, 2015 | Dec 17, 2014 |
| Ubuntu | — | Upgrade linux-image-3.16.0-28-powerpc-e500mcUpgrade linux-image-2.6.32-71-virtualUpgrade linux-image-3.16.0-28-genericUpgrade linux-image-3.2.0-74-powerpc64-smpUpgrade linux-image-3.13.0-43-powerpc-e500Upgrade linux-image-2.6.32-71-preemptUpgrade linux-image-3.2.0-74-powerpc-smpUpgrade linux-image-3.13.0-43-powerpc64-smpUpgrade linux-image-2.6.32-71-sparc64-smpUpgrade linux-image-3.13.0-43-powerpc-e500mcUpgrade linux-image-3.13.0-43-generic-lpaeUpgrade linux-image-3.2.0-1458-omap4Upgrade linux-image-3.2.0-74-virtualUpgrade linux-image-3.2.0-74-omapUpgrade linux-image-2.6.32-71-serverUpgrade linux-image-2.6.32-71-lpiaUpgrade linux-image-3.13.0-43-genericUpgrade linux-image-3.16.0-28-generic-lpaeUpgrade linux-image-2.6.32-71-ia64Upgrade linux-image-3.2.0-74-genericUpgrade linux-image-3.13.0-43-powerpc64-embUpgrade linux-image-3.2.0-74-generic-paeUpgrade linux-image-3.2.0-74-highbankUpgrade linux-image-2.6.32-71-sparc64Upgrade linux-image-3.16.0-28-powerpc64-smpUpgrade linux-image-2.6.32-71-genericUpgrade linux-image-3.16.0-28-powerpc-smpUpgrade linux-image-2.6.32-71-versatileUpgrade linux-image-2.6.32-71-powerpc-smpUpgrade linux-image-2.6.32-71-powerpc64-smpUpgrade linux-image-2.6.32-375-ec2Upgrade linux-image-2.6.32-71-generic-paeUpgrade linux-image-3.13.0-43-lowlatencyUpgrade linux-image-3.16.0-28-powerpc64-embUpgrade linux-image-2.6.32-71-powerpcUpgrade linux-image-3.13.0-43-powerpc-smpUpgrade linux-image-2.6.32-71-386Upgrade linux-image-3.16.0-28-lowlatency | Nov 8, 2024 | Dec 17, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub