CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Permissions Privileges and Access Controls
Summary: arch/x86/kernel/entry_64.s in the linux kernel before 3.17.5 does not properly handle faults associated with the stack segment (ss) segment register, which allows local users to gain privileges by triggering an iret instruction that leads to access to a gs base address from the wrong space.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2014-12-17
Last Modified Date: 2017-11-10