Lucene search
K

16 matches found

UbuntuCve
UbuntuCve
added 2026/05/08 2:16 p.m.6 views

CVE-2026-43331

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Disable KCOV instrumentation after loadsegments The loadsegments function changes segment registers, invalidating GS base which KCOV relies on for per-cpu data. When CONFIGKCOV is enabled, any subsequent instrumented C...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.5 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure of KCOV detection after the x86 kexec operation, resulting in an invalid GS base...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002140)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002140 advisory. arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local...

7.8CVSS6.9AI score0.05409EPSS
Exploits8References25
SUSE CVE
SUSE CVE
added 2024/07/17 3:33 a.m.1 views

SUSE CVE-2024-40944

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to ccplatformhas triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by loadsegments and GSBASE is now 0 but call depth...

5.5CVSS6.5AI score0.00018EPSS
Exploits0References10
OSV
OSV
added 2024/07/12 1:15 p.m.0 views

DEBIAN-CVE-2024-40944

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to ccplatformhas triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by loadsegments and GSBASE is now 0 but call depth...

5.5CVSS4.8AI score0.00018EPSS
Exploits0References1
OSV
OSV
added 2024/07/12 1:15 p.m.0 views

UBUNTU-CVE-2024-40944

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to ccplatformhas triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by loadsegments and GSBASE is now 0 but call depth...

5.5CVSS5.7AI score0.00018EPSS
Exploits0References13
SUSE CVE
SUSE CVE
added 2023/02/15 5:25 a.m.2 views

SUSE CVE-2014-9322

arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space...

7.8CVSS6.6AI score0.05409EPSS
Exploits8References16
FreeBSD
FreeBSD
added 2015/08/25 12:0 a.m.23 views

FreeBSD -- Local privilege escalation in IRET handler

Problem Description: If the kernel-mode IRET instruction generates an SS or NP exception, but the exception handler does not properly ensure that the right GS register base for kernel is reloaded, the userland GS segment may be used in the context of the kernel exception handler. Impact: By causi...

7.8CVSS7.6AI score0.00051EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2014/12/22 6:51 p.m.0 views

kernel: x86: local privesc due to bad_iret and paranoid entry incompatibility

A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a SS stack segment fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system...

7.8CVSS6.6AI score0.05409EPSS
Exploits8References4
Tenable Nessus
Tenable Nessus
added 2014/12/22 12:0 a.m.34 views

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3107)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3107 advisory. - isofs: Fix unbounded recursion when processing relocated directories Jan Kara Orabug: 20224060 CVE-2014-5471 CVE-2014-5472 Tenable has extracted...

7.8CVSS7AI score0.05409EPSS
Exploits10References5
RedHat Linux
RedHat Linux
added 2014/12/17 6:38 p.m.1 views

kernel: x86: local privesc due to bad_iret and paranoid entry incompatibility

A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a SS stack segment fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system...

7.8CVSS6.6AI score0.05409EPSS
Exploits8References4
RedHat Linux
RedHat Linux
added 2014/12/17 6:28 p.m.2 views

kernel: x86: local privesc due to bad_iret and paranoid entry incompatibility

A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a SS stack segment fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system...

7.8CVSS6.6AI score0.05409EPSS
Exploits8References4
NVD
NVD
added 2014/12/17 11:59 a.m.19 views

CVE-2014-9322

arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space...

7.8CVSS7.5AI score0.05409EPSS
Exploits8References22
Debian CVE
Debian CVE
added 2014/12/17 11:0 a.m.36 views

CVE-2014-9322

arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space...

7.8CVSS6.6AI score0.05409EPSS
Exploits8
UbuntuCve
UbuntuCve
added 2014/12/17 12:0 a.m.33 views

CVE-2014-9322

arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space...

7.8CVSS6.7AI score0.05409EPSS
Exploits8References10
OSV
OSV
added 2014/12/17 12:0 a.m.0 views

UBUNTU-CVE-2014-9322

arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space...

7.8CVSS6.7AI score0.05409EPSS
Exploits8References11
Rows per page
Query Builder