The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-abi-whitelistsUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-firmwareUpgrade perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-devel | Dec 1, 2016 | Dec 25, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 26, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 6, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Dec 26, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 8, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-docs | Dec 18, 2015 | Dec 25, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.2.0-1461-omap4Upgrade linux-image-3.2.0-79-generic-paeUpgrade linux-image-3.16.0-31-genericUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.2.0-79-powerpc64-smpUpgrade linux-image-3.2.0-79-highbankUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.2.0-79-omapUpgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.2.0-79-genericUpgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-3.13.0-46-genericUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.2.0-79-virtualUpgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-3.2.0-79-powerpc-smp | Nov 8, 2024 | Dec 26, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub