CVE-2014-9322

Priority
High
Description
arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not
properly handle faults associated with the Stack Segment (SS) segment
register, which allows local users to gain privileges by triggering an IRET
instruction that leads to access to a GS Base address from the wrong space.
Ubuntu-Description
Andy Lutomirski discovered that the Linux kernel does not properly handle
faults associated with the Stack Segment (SS) register in the x86
architecture. A local attacker could exploit this flaw to gain
administrative privileges.
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9322
https://marc.info/?l=oss-security&m=141866657032651&w=2
https://usn.ubuntu.com/usn/usn-2464-1
https://usn.ubuntu.com/usn/usn-2491-1
https://usn.ubuntu.com/usn/usn-2443-1
https://usn.ubuntu.com/usn/usn-2447-1
https://usn.ubuntu.com/usn/usn-2446-1
https://usn.ubuntu.com/usn/usn-2462-1
https://usn.ubuntu.com/usn/usn-2448-1
https://usn.ubuntu.com/usn/usn-2445-1
Bugs
https://launchpad.net/bugs/1403855
Notes
 jdstrand> android kernels (flo, goldfish, grouper, maguro, mako and manta) are
  not supported on the Ubuntu Touch 14.04 preview kernels
 jdstrand> linux-lts-saucy no longer receives official support
 jdstrand> linux-lts-quantal no longer receives official support
Package
Source: linux-lts-trusty (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):released (3.13.0-43.72~precise1)
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-lts-wily (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):not-affected (4.2.0-18.22~14.04.1)
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source tree: https://github.com/bq/aquaris-E5
linux-vegetahd:needed
Package
Source: linux-lts-quantal (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE (precise was ignored [was pending [3.5.0-60.87~precise1] OEM release])
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Patches:
Package
Source: linux-gke (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (4.4.0-1003.3)
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):released (3.2.0-74.109)
Ubuntu 14.04 LTS (Trusty Tahr):released (3.13.0-43.72)
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (4.2.0-16.19)
Ubuntu 17.04 (Zesty Zapus):not-affected (4.8.0-22.24)
Ubuntu 17.10 (Artful Aardvark):not-affected (4.10.0-19.21)
Patches:
Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2Fixed by 6f442be2fb22be02cafa606f1769fa1e6f894441
Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2Fixed by b645af2d5905c4e32399005b867987919cbfc3ae
Package
Source: linux-ti-omap4 (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE (precise was released [3.2.0-1458.78])
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-lts-raring (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE (precise was ignored [was needs-triage now end-of-life])
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-armadaxp (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE (precise was released [3.2.0-1642.61])
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-linaro-shared (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE (precise was ignored [abandoned])
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-maguro (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):ignored
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-lts-xenial (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):not-affected (4.4.0-13.29~14.04.1)
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-mvl-dove (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-lts-saucy (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE (precise was ignored [was pending [3.11.0-32.53~precise1] OEM release])
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-hwe-edge (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (4.8.0-28.30~16.04.1)
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-manta (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):ignored
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-ec2 (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-grouper (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):ignored
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-linaro-vexpress (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE (precise was ignored [abandoned])
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-qcm-msm (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE (precise was ignored [abandoned])
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-lts-vivid (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):not-affected (3.19.0-18.18~14.04.1)
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-aws (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):not-affected (4.4.0-1002.2)
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (4.4.0-1001.10)
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-raspi2 (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (4.2.0-1014.21)
Ubuntu 17.04 (Zesty Zapus):not-affected (4.8.0-1013.15)
Ubuntu 17.10 (Artful Aardvark):not-affected (4.10.0-1004.6)
Package
Source: linux-snapdragon (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (4.4.0-1012.12)
Ubuntu 17.04 (Zesty Zapus):not-affected (4.4.0-1029.32)
Ubuntu 17.10 (Artful Aardvark):not-affected (4.4.0-1050.54)
Package
Source: linux-mako (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):ignored
Ubuntu 16.04 LTS (Xenial Xerus):ignored (abandoned)
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-fsl-imx51 (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-linaro-omap (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE (precise was ignored [abandoned])
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-lts-utopic (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):released (3.16.0-28.37~14.04.1)
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-2.6 (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-goldfish (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):ignored
Ubuntu 16.04 LTS (Xenial Xerus):ignored (abandoned)
Ubuntu 17.04 (Zesty Zapus):ignored (abandoned)
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source: linux-hwe (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (4.8.0-36.36~16.04.1)
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
Package
Source tree: https://github.com/bq/aquaris-E4.5
linux-krillin:needed
Package
Source: linux-flo (LP Ubuntu Debian)
Upstream:released (3.18~rc6)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):ignored
Ubuntu 16.04 LTS (Xenial Xerus):ignored (abandoned)
Ubuntu 17.04 (Zesty Zapus):DNE
Ubuntu 17.10 (Artful Aardvark):DNE
More Information

Updated: 2017-12-15 20:33:56 UTC (commit 13913)