CVE-2013-0914 in Linux Kernel
Summary
The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call.
Reservation
01/07/2013
Disclosure
03/22/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7997 | Linux Kernel Child Process signal.c sa_restorer access control | 264 | Not defined | Official fix | CVE-2013-0914 |