The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call.
CVSS Details
- CVSS 3.1 Base Score: 4.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-firmwareUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-headersUpgrade perfUpgrade kernel-PAE-devel | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Mar 22, 2013 |
| Suse | — | Upgrade kernel-smpUpgrade kernel-paeUpgrade kernel-docsUpgrade hyper-v-kmp-defaultUpgrade kernel-default-extraUpgrade ext4dev-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-desktop-baseUpgrade kernel-xenpaeUpgrade kernel-default-develUpgrade ocfs2-kmp-ppc64Upgrade kernel-default-manUpgrade hyper-v-kmp-traceUpgrade kernel-pae-baseUpgrade kernel-ppc64-baseUpgrade gfs2-kmp-ppc64Upgrade xen-kmp-traceUpgrade ext4dev-kmp-traceUpgrade ocfs2-kmp-xenUpgrade kernel-bigsmpUpgrade ocfs2-kmp-traceUpgrade kernel-trace-develUpgrade kernel-xenUpgrade ext4dev-kmp-paeUpgrade hyper-v-kmp-paeUpgrade kernel-source-vanillaUpgrade kernel-pae-develUpgrade ocfs2-kmp-paeUpgrade btrfs-kmp-defaultUpgrade kernel-ec2Upgrade kernel-desktop-develUpgrade kernel-defaultUpgrade kernel-vanilla-develUpgrade kernel-vmiUpgrade gfs2-kmp-paeUpgrade kernel-default-baseUpgrade cluster-network-kmp-xenUpgrade kernel-traceUpgrade btrfs-kmp-paeUpgrade kernel-kdumppaeUpgrade kernel-ppc64-develUpgrade kernel-pae-extraUpgrade kernel-vmipaeUpgrade kernel-vanillaUpgrade kernel-ec2-baseUpgrade cluster-network-kmp-paeUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade kernel-desktopUpgrade kernel-xen-develUpgrade cluster-network-kmp-ppc64Upgrade kernel-kdumpUpgrade gfs2-kmp-defaultUpgrade kernel-symsUpgrade gfs2-kmp-xenUpgrade ext4dev-kmp-xenUpgrade sle-hae-releaseUpgrade cluster-network-kmp-defaultUpgrade kernel-debug-baseUpgrade cluster-network-kmp-traceUpgrade kernel-sourceUpgrade xen-kmp-paeUpgrade kernel-xen-baseUpgrade kernel-trace-extraUpgrade kernel-ppc64Upgrade btrfs-kmp-xenUpgrade gfs2-kmp-traceUpgrade kernel-trace-baseUpgrade xen-kmp-defaultUpgrade kernel-develUpgrade kernel-xen-extraUpgrade kernel-debug-devel | Feb 17, 2015 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-27-powerpc-smpUpgrade linux-image-3.2.0-40-omapUpgrade linux-image-2.6.32-46-386Upgrade linux-image-3.5.0-27-highbankUpgrade linux-image-2.6.32-46-genericUpgrade linux-image-3.2.0-40-genericUpgrade linux-image-3.5.0-27-omapUpgrade linux-image-3.2.0-1429-omap4Upgrade linux-image-3.5.0-27-genericUpgrade linux-image-3.2.0-40-highbankUpgrade linux-image-3.0.0-32-omapUpgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-3.2.0-40-powerpc-smpUpgrade linux-image-2.6.32-46-preemptUpgrade linux-image-3.0.0-32-powerpc64-smpUpgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-3.5.0-27-powerpc64-smpUpgrade linux-image-2.6.32-46-serverUpgrade linux-image-3.0.0-32-virtualUpgrade linux-image-3.0.0-32-genericUpgrade linux-image-2.6.32-46-virtualUpgrade linux-image-2.6.32-46-versatileUpgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-3.0.0-32-serverUpgrade linux-image-3.2.0-40-virtualUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-2.6.32-351-ec2Upgrade linux-image-3.2.0-40-powerpc64-smpUpgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-3.0.0-32-powerpc-smpUpgrade linux-image-3.0.0-32-powerpcUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-3.5.0-222-omap4Upgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-3.2.0-40-generic-paeUpgrade linux-image-3.0.0-32-generic-pae | Nov 8, 2024 | Mar 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub