The do_double_fault function in arch/x86/kernel/traps.c in the Linux kernel through 3.17.4 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to cause a denial of service (panic) via a modify_ldt system call, as demonstrated by sigreturn_32 in the linux-clock-tests test suite.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 30, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-ec2 | Dec 18, 2015 | Nov 29, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-74-highbankUpgrade linux-image-2.6.32-70-preemptUpgrade linux-image-2.6.32-70-powerpcUpgrade linux-image-3.16.0-28-powerpc64-embUpgrade linux-image-3.13.0-43-genericUpgrade linux-image-3.13.0-43-powerpc-e500mcUpgrade linux-image-3.13.0-43-lowlatencyUpgrade linux-image-3.16.0-28-powerpc-e500mcUpgrade linux-image-3.16.0-28-powerpc64-smpUpgrade linux-image-2.6.32-70-genericUpgrade linux-image-2.6.32-70-generic-paeUpgrade linux-image-2.6.32-70-sparc64-smpUpgrade linux-image-2.6.32-70-powerpc64-smpUpgrade linux-image-3.16.0-28-lowlatencyUpgrade linux-image-3.16.0-28-powerpc-smpUpgrade linux-image-3.13.0-43-powerpc-smpUpgrade linux-image-3.2.0-74-omapUpgrade linux-image-3.16.0-28-generic-lpaeUpgrade linux-image-3.2.0-74-generic-paeUpgrade linux-image-3.2.0-1458-omap4Upgrade linux-image-2.6.32-374-ec2Upgrade linux-image-3.13.0-43-generic-lpaeUpgrade linux-image-3.13.0-43-powerpc-e500Upgrade linux-image-3.2.0-74-powerpc-smpUpgrade linux-image-2.6.32-70-ia64Upgrade linux-image-3.2.0-74-powerpc64-smpUpgrade linux-image-2.6.32-70-versatileUpgrade linux-image-2.6.32-70-serverUpgrade linux-image-2.6.32-70-sparc64Upgrade linux-image-3.13.0-43-powerpc64-smpUpgrade linux-image-2.6.32-70-386Upgrade linux-image-3.2.0-74-virtualUpgrade linux-image-2.6.32-70-virtualUpgrade linux-image-2.6.32-70-lpiaUpgrade linux-image-3.16.0-28-genericUpgrade linux-image-3.13.0-43-powerpc64-embUpgrade linux-image-2.6.32-70-powerpc-smpUpgrade linux-image-3.2.0-74-generic | Nov 8, 2024 | Nov 30, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub