Is CVE-2014-9322 being actively exploited?

CVE-2014-9322 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2014-9322?

CVE-2014-9322 has a CVSS 3.1 base score of 7.8 (HIGH).

CVE-2014-9322

HIGH · CVSS 7.8EPSS 1.5%EU EUVD

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.

Key facts

CVSS score: 7.8 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-269
EPSS score: 1.5% (75th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2014-9147)
Published: December 17, 2014
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2014-9147 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

canonical / ubuntu linux
google / android
google / android
linux / linux kernel
opensuse / evergreen
redhat / enterprise linux eus
suse / suse linux enterprise server

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f442be2fb22be02cafa606f1769fa1e6f894441
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html(Mailing List, Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html(Mailing List, Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html(Mailing List, Third Party Advisory)
http://marc.info/?l=bugtraq&m=142722450701342&w=2(Mailing List, Third Party Advisory)
http://marc.info/?l=bugtraq&m=142722544401658&w=2(Mailing List, Third Party Advisory)
http://osvdb.org/show/osvdb/115919(Broken Link)
http://rhn.redhat.com/errata/RHSA-2014-1998.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2014-2008.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2014-2028.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2014-2031.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2015-0009.html(Third Party Advisory)
http://secunia.com/advisories/62336(Broken Link)
http://source.android.com/security/bulletin/2016-04-02.html(Patch, Third Party Advisory)
http://www.exploit-db.com/exploits/36266(Exploit, Third Party Advisory, VDB Entry)
http://www.openwall.com/lists/oss-security/2014/12/15/6(Mailing List, Patch, Third Party Advisory)
http://www.ubuntu.com/usn/USN-2491-1(Third Party Advisory)
http://www.zerodayinitiative.com/advisories/ZDI-16-170(Third Party Advisory, VDB Entry)
https://bugzilla.redhat.com/show_bug.cgi?id=1172806(Issue Tracking, Patch, Third Party Advisory)
https://github.com/torvalds/linux/commit/6f442be2fb22be02cafa606f1769fa1e6f894441(Patch, Third Party Advisory)
https://help.joyent.com/entries/98788667-Security-Advisory-ZDI-CAN-3263-ZDI-CAN-3284-and-ZDI-CAN-3364-Vulnerabilities(Permissions Required, Third Party Advisory)
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.5(Mailing List, Patch, Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain