VDB

DEBIAN-CVE-2014-9585

DEBIAN-CVE-2014-9585 PUBLISHED

The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.

Affected Products

VendorProductVersions
Debian:12linux0, 0, 0
Debian:11linux0, 0, 0
Debian:13linux0, 0, 0
Debian:14linux0, 0, 0

Timeline

  • Jan 9, 2015 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›