CVE-2014-9585

The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it…

published January 9, 2015

CVSS
—
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00557 · 45.7th percentile
Published
2015-01-09T21:00Z
EPSS history
Timeline
  • 09 JAN 21:00Z
    The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it…
    cvelistv5