The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-firmwareUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-docUpgrade kernel-abi-whitelistsUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools | Dec 1, 2016 | Jan 9, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 9, 2015 |
| F5 Big Ip | — | — | Feb 16, 2017 | Jan 9, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jan 9, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 11, 2014 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Jan 9, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.2.0-77-omapUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.2.0-77-powerpc64-smpUpgrade linux-image-3.2.0-77-virtualUpgrade linux-image-3.2.0-1460-omap4Upgrade linux-image-3.16.0-31-genericUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.2.0-77-powerpc-smpUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-3.2.0-77-genericUpgrade linux-image-3.2.0-77-highbankUpgrade linux-image-3.2.0-77-generic-paeUpgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-3.13.0-46-genericUpgrade linux-image-3.16.0-31-lowlatency | Nov 8, 2024 | Jan 9, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub