NVD

Id
35878  
Name
CVE-2014-9090  
Description
The do_double_fault function in arch/x86/kernel/traps.c in the Linux kernel through 3.17.4 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to cause a denial of service (panic) via a modify_ldt system call, as demonstrated by sigreturn_32 in the linux-clock-tests test suite.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-11-29  
Modified Date
2015-06-03  
Seq
2014-9090  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
183689 35878 CVE-2014-9090 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6f442be2fb22be02cafa606f1769fa1e6f894441  View
183690 35878 CVE-2014-9090 openSUSE-SU-2015:0566  View
183691 35878 CVE-2014-9090 SUSE-SU-2015:0736  View
183692 35878 CVE-2014-9090 SUSE-SU-2015:0812  View
183693 35878 CVE-2014-9090 DSA-3093  View
183694 35878 CVE-2014-9090 [oss-security] 20141126 Re: CVE Request: Linux kernel LDT handling bugs  View
183695 35878 CVE-2014-9090 https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16833 JVNDB-2014-005708 Linux Kernel の arch/x86/kernel/traps.c 内の do_double_fault 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の arch/x86/kernel/traps.c 内の do_double_fault 関数は、Stack Segment (SS) のセグメントレジスタに関連付けられた失敗 (fault) を適切に処理しないため、サービス運用妨害 (パニック) 状態にされる脆弱性が存在します。 CVE-2014-9090 76383 CVE-2014-9090 35878 4.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005708.html 2014-11-23 2014-12-02 View