** Description changed: - [x86: local privesc due to bad_iret and paranoid entry incompatibility] + arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not + properly handle faults associated with the Stack Segment (SS) segment + register, which allows local users to gain privileges by triggering an + IRET instruction that leads to access to a GS Base address from the + wrong space. Break-Fix: - 6f442be2fb22be02cafa606f1769fa1e6f894441 Break-Fix: - b645af2d5905c4e32399005b867987919cbfc3ae
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1403855 Title: CVE-2014-9322 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1403855/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
