Exploitation Summary
EIP tracks 3 public exploits for CVE-2014-9322. PoCs published by Ren Kimura, Emeric Nasi, RKX1209.
AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2014-9322 (BadIRET), a Linux kernel privilege escalation vulnerability. It leverages raw syscalls to create threads and trigger the vulnerability without relying on external libraries.
Description
arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.
Exploits (3)
This is a proof-of-concept exploit for CVE-2014-9322 (BadIRET), a Linux kernel privilege escalation vulnerability. It leverages raw syscalls to create threads and trigger the vulnerability without relying on external libraries.
This PoC exploits CVE-2014-9322, a Linux kernel vulnerability in arch/x86/kernel/entry_64.S, by manipulating the Stack Segment (SS) register to trigger a kernel panic. It uses a secondary thread to invalidate the stack segment while the main thread attempts to use it, leading to a DoS condition.
This is a proof-of-concept exploit for CVE-2014-9322 (BadIRET), a Linux kernel privilege escalation vulnerability. It manipulates the stack segment via syscalls to trigger the vulnerability, allowing local privilege escalation.
References (22)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H