The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDR_NO_RANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid or setgid program, by disabling stack-consumption resource limits.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-kernel | Apr 28, 2016 | Apr 27, 2016 |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Aug 28, 2019 | Apr 27, 2016 |
| Debian | debian-upgrade-linux | Jun 28, 2016 | Apr 27, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-kernelhuawei-euleros-2_0_sp1-upgrade-kernel-debughuawei-euleros-2_0_sp1-upgrade-kernel-debuginfohuawei-euleros-2_0_sp1-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp1-upgrade-kernel-develhuawei-euleros-2_0_sp1-upgrade-kernel-headershuawei-euleros-2_0_sp1-upgrade-kernel-toolshuawei-euleros-2_0_sp1-upgrade-kernel-tools-libshuawei-euleros-2_0_sp1-upgrade-perfhuawei-euleros-2_0_sp1-upgrade-python-perf | Nov 30, 2017 | Apr 27, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-dtrace-modulesoracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uekoracle-linux-upgrade-kernel-uek-debugoracle-linux-upgrade-kernel-uek-debug-develoracle-linux-upgrade-kernel-uek-develoracle-linux-upgrade-kernel-uek-docoracle-linux-upgrade-kernel-uek-firmware | Apr 4, 2017 | Apr 27, 2016 |
| Redhat_linux | — | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Apr 11, 2018 | Apr 27, 2016 |
| Suse | — | suse-upgrade-cluster-md-kmp-defaultsuse-upgrade-cluster-network-kmp-defaultsuse-upgrade-dlm-kmp-defaultsuse-upgrade-gfs2-kmp-defaultsuse-upgrade-kernel-defaultsuse-upgrade-kernel-docssuse-upgrade-kernel-ec2suse-upgrade-kernel-ec2-develsuse-upgrade-kernel-ec2-extrasuse-upgrade-kernel-obs-buildsuse-upgrade-ocfs2-kmp-default | Jun 21, 2016 | Apr 27, 2016 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-87-genericubuntu-upgrade-linux-image-3-13-0-87-generic-lpaeubuntu-upgrade-linux-image-3-13-0-87-lowlatencyubuntu-upgrade-linux-image-3-13-0-87-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-87-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-87-powerpc-smpubuntu-upgrade-linux-image-3-13-0-87-powerpc64-embubuntu-upgrade-linux-image-3-13-0-87-powerpc64-smpubuntu-upgrade-linux-image-3-13-0-88-genericubuntu-upgrade-linux-image-3-13-0-88-generic-lpaeubuntu-upgrade-linux-image-3-16-0-73-genericubuntu-upgrade-linux-image-3-16-0-73-generic-lpaeubuntu-upgrade-linux-image-3-16-0-73-lowlatencyubuntu-upgrade-linux-image-3-16-0-73-powerpc-e500mcubuntu-upgrade-linux-image-3-16-0-73-powerpc-smpubuntu-upgrade-linux-image-3-16-0-73-powerpc64-embubuntu-upgrade-linux-image-3-16-0-73-powerpc64-smpubuntu-upgrade-linux-image-3-19-0-61-genericubuntu-upgrade-linux-image-3-19-0-61-generic-lpaeubuntu-upgrade-linux-image-3-19-0-61-lowlatencyubuntu-upgrade-linux-image-3-19-0-61-powerpc-e500mcubuntu-upgrade-linux-image-3-19-0-61-powerpc-smpubuntu-upgrade-linux-image-3-19-0-61-powerpc64-embubuntu-upgrade-linux-image-3-19-0-61-powerpc64-smpubuntu-upgrade-linux-image-3-2-0-104-genericubuntu-upgrade-linux-image-3-2-0-104-generic-paeubuntu-upgrade-linux-image-3-2-0-104-highbankubuntu-upgrade-linux-image-3-2-0-104-omapubuntu-upgrade-linux-image-3-2-0-104-powerpc-smpubuntu-upgrade-linux-image-3-2-0-104-powerpc64-smpubuntu-upgrade-linux-image-3-2-0-104-virtualubuntu-upgrade-linux-image-3-2-0-1482-omap4ubuntu-upgrade-linux-image-4-2-0-1031-raspi2ubuntu-upgrade-linux-image-4-2-0-38-genericubuntu-upgrade-linux-image-4-2-0-38-generic-lpaeubuntu-upgrade-linux-image-4-2-0-38-lowlatencyubuntu-upgrade-linux-image-4-2-0-38-powerpc-e500mcubuntu-upgrade-linux-image-4-2-0-38-powerpc-smpubuntu-upgrade-linux-image-4-2-0-38-powerpc64-embubuntu-upgrade-linux-image-4-2-0-38-powerpc64-smpubuntu-upgrade-linux-image-4-4-0-1010-raspi2ubuntu-upgrade-linux-image-4-4-0-1013-snapdragonubuntu-upgrade-linux-image-4-4-0-22-genericubuntu-upgrade-linux-image-4-4-0-22-generic-lpaeubuntu-upgrade-linux-image-4-4-0-22-lowlatencyubuntu-upgrade-linux-image-4-4-0-22-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-22-powerpc-smpubuntu-upgrade-linux-image-4-4-0-22-powerpc64-embubuntu-upgrade-linux-image-4-4-0-22-powerpc64-smp | May 6, 2016 | Apr 27, 2016 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub