CVE-2014-9090 is a denial-of-service vulnerability in the Linux kernel (through version 3.17.4) affecting the do_double_fault function. It allows local users to trigger a kernel panic by manipulating the Stack Segment register via the modify_ldt system call. The vulnerability has a CVSS score of 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C), indicating a low attack complexity and requiring local access, with the primary impact being system unavailability. There is no evidence of active exploitation, nor is public exploit code available in Metasploit, Nuclei, or ExploitDB. Despite limited community discussion and media coverage, its EPSS score is very low, suggesting a minimal threat.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.17.3CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:N/I:N/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.