Wind River Support Network

HomeDefectsLIN5-19798
Fixed

LIN5-19798 : Security Advisory - linux - CVE-2014-9090

Created: Dec 1, 2014    Updated: Dec 19, 2017
Resolved Date: Feb 10, 2015
Found In Version: 5.0.1.20
Fix Version: 5.0.1.24
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Kernel

Description

The do_double_fault function in arch/x86/kernel/traps.c in the Linux kernel through 3.17.4 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to cause a denial of service (panic) via a modify_ldt system call, as demonstrated by sigreturn_32 in the linux-clock-tests test suite.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9090

Other Downloads


Live chat
Online