Permissions, Privileges, and Access Controls in Linux kernel and Google Android - CVE-2014-9322

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU41004

Permissions, Privileges, and Access Controls in Linux kernel and Google Android - CVE-2014-9322

Published: December 17, 2014 / Updated: June 17, 2021


Vulnerability identifier: #VU41004
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-9322
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.


Affected software

Linux kernel
Google Android
Ubuntu
linux (Ubuntu package)
linux-lts-trusty (Ubuntu package)
linux-lts-utopic (Ubuntu package)

How to mitigate CVE-2014-9322

Install update from vendor's website.

linux (Ubuntu package) - addressed in versions 2.6.32-71.138, 3.2.0-74.109, 3.13.0-43.72, 3.16.0-28.37
linux-lts-trusty (Ubuntu package) - update to 3.13.0-43.72~precise1
linux-lts-utopic (Ubuntu package) - update to 3.16.0-28.37~14.04.1

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins