The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, which makes it easier for attackers to bypass the ASLR protection mechanism by predicting the address of the top of the stack, related to the randomize_stack_top function in fs/binfmt_elf.c and the stack_maxrandom_size function in arch/x86/mm/mmap.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Dec 1, 2016 | Mar 16, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 16, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 8, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 5, 2022 | Mar 16, 2015 |
| Redhat_linux | — | No solution existsUpgrade kernel | Nov 6, 2019 | Mar 16, 2015 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Mar 16, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-49-powerpc-smpUpgrade linux-image-3.16.0-34-generic-lpaeUpgrade linux-image-3.16.0-34-powerpc-smpUpgrade linux-image-3.13.0-49-genericUpgrade linux-image-3.13.0-49-powerpc64-embUpgrade linux-image-3.13.0-49-powerpc64-smpUpgrade linux-image-3.2.0-80-powerpc64-smpUpgrade linux-image-3.16.0-34-powerpc-e500mcUpgrade linux-image-3.2.0-80-highbankUpgrade linux-image-3.13.0-49-powerpc-e500Upgrade linux-image-3.2.0-80-powerpc-smpUpgrade linux-image-3.13.0-49-generic-lpaeUpgrade linux-image-3.2.0-80-genericUpgrade linux-image-3.16.0-34-genericUpgrade linux-image-3.16.0-34-powerpc64-embUpgrade linux-image-3.13.0-49-powerpc-e500mcUpgrade linux-image-3.2.0-80-generic-paeUpgrade linux-image-3.13.0-49-lowlatencyUpgrade linux-image-3.2.0-1462-omap4Upgrade linux-image-3.16.0-34-powerpc64-smpUpgrade linux-image-3.2.0-80-virtualUpgrade linux-image-3.2.0-80-omapUpgrade linux-image-3.16.0-34-lowlatency | Nov 8, 2024 | Mar 16, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub