Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 15 min 162 bronnen 10 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2014-9419

LOW · 2.1 CVSS Gepubliceerd: CWE-200

Beschrijving

The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.

Vendors

Linux

Affected products

Linux Kernel

References