CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Permissions Privileges and Access Controls
Summary: arch/x86/kernel/entry_64.s in the linux kernel before 3.17.5 does not properly handle faults associated with the stack segment (ss) segment register, which allows local users to gain privileges by triggering an iret instruction that leads to access to a gs base address from the wrong space.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2014-12-17
Last Modified Date: 2017-11-10
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Permissions Privileges and Access Controls.
user
CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Permissions Privileges and Access Controls
Summary: arch/x86/kernel/entry_64.s in the linux kernel before 3.17.5 does not properly handle faults associated with the stack segment (ss) segment register, which allows local users to gain privileges by triggering an iret instruction that leads to access to a gs base address from the wrong space.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2014-12-17
Last Modified Date: 2017-11-10
assistant