arch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mechanism, via a crafted application that makes a set_thread_area system call and later reads a 16-bit value.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 17, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 24, 2015 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-headers | Dec 11, 2019 | Dec 17, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Dec 17, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 15, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-ec2Upgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-default | Dec 18, 2015 | Dec 17, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-72-powerpc-smpUpgrade linux-image-3.2.0-76-powerpc64-smpUpgrade linux-image-2.6.32-72-preemptUpgrade linux-image-3.2.0-76-highbankUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.2.0-1459-omap4Upgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.2.0-76-virtualUpgrade linux-image-3.13.0-46-genericUpgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-2.6.32-72-ia64Upgrade linux-image-2.6.32-375-ec2Upgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-2.6.32-72-virtualUpgrade linux-image-3.2.0-76-generic-paeUpgrade linux-image-2.6.32-72-powerpc64-smpUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.2.0-76-omapUpgrade linux-image-3.16.0-31-genericUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.2.0-76-powerpc-smpUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-2.6.32-72-sparc64Upgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-2.6.32-72-sparc64-smpUpgrade linux-image-3.2.0-76-genericUpgrade linux-image-2.6.32-72-genericUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-2.6.32-72-serverUpgrade linux-image-2.6.32-72-versatileUpgrade linux-image-2.6.32-72-386Upgrade linux-image-2.6.32-72-powerpcUpgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-2.6.32-72-generic-paeUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-2.6.32-72-lpia | Nov 8, 2024 | Dec 17, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub