high
7.8
CWE
269
Advisory Published
CVE Published
Updated

CVE-2014-9322

First published: Wed Dec 10 2014(Updated: )

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Linux Kernel<3.2.65
Linux Kernel>=3.3<3.4.106
Linux Kernel>=3.5<3.10.62
Linux Kernel>=3.11<3.12.35
Linux Kernel>=3.13<3.14.26
Linux Kernel>=3.15<3.16.35
Linux Kernel>=3.17<3.17.5
redhat enterprise Linux eus=5.6
Ubuntu Linux=10.04
openSUSE Evergreen=11.4
SUSE Linux Enterprise Server=10-sp4
Android=6.0
Android=6.0.1
debian/linux
5.10.223-1
5.10.226-1
6.1.123-1
6.1.128-1
6.12.12-1
6.12.16-1
Linux kernel<3.2.65
Linux kernel>=3.3<3.4.106
Linux kernel>=3.5<3.10.62
Linux kernel>=3.11<3.12.35
Linux kernel>=3.13<3.14.26
Linux kernel>=3.15<3.16.35
Linux kernel>=3.17<3.17.5
Red Hat Enterprise Linux Server EUS=5.6
Evergreen ILS=11.4

Remedy

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6f442be2fb22be02cafa606f1769fa1e6f894441

Remedy

http://source.android.com/security/bulletin/2016-04-02.html

Remedy

http://www.openwall.com/lists/oss-security/2014/12/15/6

Remedy

https://bugzilla.redhat.com/show_bug.cgi?id=1172806

Remedy

https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441

Remedy

https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.5

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2014-9322?

    The severity of CVE-2014-9322 is classified as high due to its potential to allow local users to gain elevated privileges.

  • How do I fix CVE-2014-9322?

    To fix CVE-2014-9322, upgrade to a Linux kernel version that is 3.17.5 or newer or ensure you are on a fixed version like 5.10.223-1 or 6.1.123-1.

  • What systems are affected by CVE-2014-9322?

    CVE-2014-9322 affects various Linux kernel versions prior to 3.17.5, including those on operating systems like Debian, Ubuntu, and SUSE.

  • Can CVE-2014-9322 be exploited remotely?

    CVE-2014-9322 cannot be exploited remotely as it requires local user access to the system.

  • What is the impact of CVE-2014-9322?

    The impact of CVE-2014-9322 allows a local user to gain unauthorized privileges, potentially compromising system security.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203