The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-abi-whitelistsUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-firmware | Dec 1, 2016 | Dec 25, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 26, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 6, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Dec 26, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 8, 2014 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-obs-build | Dec 18, 2015 | Dec 25, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-79-powerpc-smpUpgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-3.2.0-79-virtualUpgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-3.13.0-46-genericUpgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.2.0-79-genericUpgrade linux-image-3.2.0-79-omapUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.2.0-1461-omap4Upgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-3.2.0-79-generic-paeUpgrade linux-image-3.2.0-79-highbankUpgrade linux-image-3.2.0-79-powerpc64-smpUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.16.0-31-generic | Nov 8, 2024 | Dec 26, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub