arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-toolsUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-docUpgrade python-perfUpgrade kernel-PAE-develUpgrade perfUpgrade kernel-firmwareUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-xen-devel | Dec 1, 2016 | Dec 17, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 17, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 16, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 22, 2024 | Dec 15, 2014 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-devel | Dec 18, 2015 | Dec 17, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-74-powerpc-smpUpgrade linux-image-3.2.0-74-virtualUpgrade linux-image-3.2.0-74-omapUpgrade linux-image-3.2.0-74-generic-paeUpgrade linux-image-2.6.32-71-serverUpgrade linux-image-2.6.32-71-ia64Upgrade linux-image-3.13.0-43-generic-lpaeUpgrade linux-image-2.6.32-71-lpiaUpgrade linux-image-3.2.0-1458-omap4Upgrade linux-image-3.13.0-43-powerpc64-embUpgrade linux-image-3.16.0-28-powerpc-e500mcUpgrade linux-image-3.2.0-74-highbankUpgrade linux-image-3.13.0-43-powerpc-e500Upgrade linux-image-2.6.32-71-virtualUpgrade linux-image-3.2.0-74-genericUpgrade linux-image-3.13.0-43-powerpc-e500mcUpgrade linux-image-3.2.0-74-powerpc64-smpUpgrade linux-image-2.6.32-71-preemptUpgrade linux-image-3.16.0-28-genericUpgrade linux-image-3.13.0-43-powerpc64-smpUpgrade linux-image-3.16.0-28-generic-lpaeUpgrade linux-image-3.13.0-43-genericUpgrade linux-image-2.6.32-71-sparc64-smpUpgrade linux-image-2.6.32-71-genericUpgrade linux-image-3.16.0-28-powerpc64-smpUpgrade linux-image-2.6.32-71-sparc64Upgrade linux-image-3.16.0-28-lowlatencyUpgrade linux-image-2.6.32-71-386Upgrade linux-image-2.6.32-71-powerpc-smpUpgrade linux-image-2.6.32-71-versatileUpgrade linux-image-2.6.32-71-powerpc64-smpUpgrade linux-image-2.6.32-375-ec2Upgrade linux-image-3.16.0-28-powerpc64-embUpgrade linux-image-3.13.0-43-powerpc-smpUpgrade linux-image-3.16.0-28-powerpc-smpUpgrade linux-image-3.13.0-43-lowlatencyUpgrade linux-image-2.6.32-71-generic-paeUpgrade linux-image-2.6.32-71-powerpc | Nov 8, 2024 | Dec 17, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub