MNBSD-2015-10: amd64 GS segment register manipulation via IRET fault

Severity: Unknown

Affected Package: kernel

Summary: amd64 GS segment register manipulation via IRET fault

Description

On amd64 the GS segment CPU register could be changed to a userland-controlled value while in kernel mode by triggering an IRET with a #SS or #NP exception. This could allow a local attacker to escalate privileges or crash the kernel.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

Additional Information

Aliases: CVE-2015-5675

Published: August 25, 2015
Last Modified: August 25, 2015