NVD

Id
36122  
Name
CVE-2014-9419  
Description
The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-12-25  
Modified Date
2017-01-02  
Seq
2014-9419  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184576 36122 CVE-2014-9419 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f647d7c155f069c1a068030255c300663516420e  View
184577 36122 CVE-2014-9419 FEDORA-2015-0517  View
184578 36122 CVE-2014-9419 FEDORA-2015-0515  View
184579 36122 CVE-2014-9419 SUSE-SU-2015:0529  View
184580 36122 CVE-2014-9419 openSUSE-SU-2015:0714  View
184581 36122 CVE-2014-9419 SUSE-SU-2015:0736  View
184582 36122 CVE-2014-9419 DSA-3128  View
184583 36122 CVE-2014-9419 MDVSA-2015:058  View
184584 36122 CVE-2014-9419 [oss-security] 20141225 Re: CVE Request: Linux x86_64 userspace address leak  View
184585 36122 CVE-2014-9419 71794  View
184586 36122 CVE-2014-9419 USN-2515-1  View
184587 36122 CVE-2014-9419 USN-2516-1  View
184588 36122 CVE-2014-9419 USN-2517-1  View
184589 36122 CVE-2014-9419 USN-2518-1  View
184590 36122 CVE-2014-9419 USN-2541-1  View
184591 36122 CVE-2014-9419 USN-2542-1  View
184592 36122 CVE-2014-9419 https://bugzilla.redhat.com/show_bug.cgi?id=1177260  View
184593 36122 CVE-2014-9419 https://github.com/torvalds/linux/commit/f647d7c155f069c1a068030255c300663516420e  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18542 JVNDB-2014-007417 Linux Kernel の arch/x86/kernel/process_64.c の __switch_to 関数における ASLR 保護メカニズムを回避される脆弱性 Linux Kernel の arch/x86/kernel/process_64.c 内の __switch_to 関数は、スレッドローカルストレージ (TLS) ディスクリプタが他のステップに進む前にロードされることを確認しないため、ASLR 保護メカニズムを回避される脆弱性が存在します。 CVE-2014-9419 76712 CVE-2014-9419 36122 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007417.html 2014-12-11 2015-01-05 View