| CVE-2014-9090 | Date: (C)2014-12-09 (M)2024-04-17 |
The do_double_fault function in arch/x86/kernel/traps.c in the Linux kernel through 3.17.4 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to cause a denial of service (panic) via a modify_ldt system call, as demonstrated by sigreturn_32 in the linux-clock-tests test suite.
CVSS Score and Metrics +CVSS Score and Metrics -| CVSS V2 Severity: |
| CVSS Score : 4.9 |
| Exploit Score: 3.9 |
| Impact Score: 6.9 |
| |
| CVSS V2 Metrics: |
| Access Vector: LOCAL |
| Access Complexity: LOW |
| Authentication: NONE |
| Confidentiality: NONE |
| Integrity: NONE |
| Availability: COMPLETE |
| | |
