2 matches found
CVE-2015-2830: Undefined Security Weakness
arch/x86/kernel/entry64.S in the Linux kernel before 3.19.2 does not prevent the TSCOMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the 1 fork or 2 close system call, as demonstrated b...
1.9CVSS5.9AI score0.00414EPSS
SaveExploits0References2
CVE-2014-9322: Improper Privilege Management
arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space...
7.8CVSS5.8AI score0.0154EPSS
SaveExploits8References2
20