The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel | Dec 1, 2016 | Jan 9, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 9, 2015 |
| F5 Big Ip | — | — | Feb 16, 2017 | Jan 9, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jan 9, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 11, 2014 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-ec2 | Dec 18, 2015 | Jan 9, 2015 |
| Ubuntu | — | Upgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-3.2.0-77-powerpc64-smpUpgrade linux-image-3.2.0-77-virtualUpgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.2.0-77-omapUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-3.2.0-77-genericUpgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-3.2.0-1460-omap4Upgrade linux-image-3.2.0-77-generic-paeUpgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.16.0-31-genericUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-3.2.0-77-powerpc-smpUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.2.0-77-highbankUpgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-3.13.0-46-generic | Nov 8, 2024 | Jan 9, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub