CVE-2014-4699

The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

2.32% chance of exploitation in the next 30 days, 82th percentile

Published

2014-07-09

Updated

2024-08-06

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/127573/Linux-Kernel-ptrace-sysret-Local-Privilege-Es…
• http://www.exploit-db.com/exploits/34134
• vnik5287/cve-2014-4699-ptrace1★ · 2019-07-23

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/34134

Exploit collections (1)

• helloexp/0day/tree/master/98-Linux%E6%8F%90%E6%9D%83/2014/CVE-2014-4699

References

• CVE Record
• NVD entry

Related

• CVE-2013-2094
• CVE-2014-4014
• CVE-2016-6187
• CVE-2017-16995
• CVE-2014-4688
• CVE-2014-4701