CVE-2014-9419 in Linux Kernel

요약 (영어)

The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.

예약하다

2014. 12. 25.

공개

2014. 12. 25.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
73384	Linux Kernel Thread Local Storage __switch_to 정보 공개	200	정의되지 않음	공식 수정	CVE-2014-9419
68463	Linux Kernel TLS Descriptor switch_to 정보 공개	200	입증되지 않음	공식 수정	CVE-2014-9419