The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-firmwareUpgrade python-perfUpgrade kernel-abi-whitelistsUpgrade kernel-headersUpgrade kernel | Dec 1, 2016 | Dec 25, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 26, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 6, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Dec 26, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 8, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-ec2-extra | Dec 18, 2015 | Dec 25, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-79-virtualUpgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.2.0-79-omapUpgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-3.2.0-79-genericUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.13.0-46-genericUpgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-3.2.0-79-powerpc-smpUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-3.2.0-1461-omap4Upgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.2.0-79-generic-paeUpgrade linux-image-3.16.0-31-genericUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.2.0-79-powerpc64-smpUpgrade linux-image-3.2.0-79-highbank | Nov 8, 2024 | Dec 26, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub