Lucene search

K
cvelistMitreCVELIST:CVE-2014-4699
HistoryJul 09, 2014 - 10:00 a.m.

CVE-2014-4699

2014-07-0910:00:00
mitre
www.cve.org

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.

References