VDB
GHSA-r6v6-qfmc-3r3v
GHSA-r6v6-qfmc-3r3v
PUBLISHED
Record from GitHub Advisory Database · Published May 14, 2022
The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.
Timeline
- May 14, 2022 CVE Published
- Apr 9, 2026 Distribution Patch (7 in total, the first dated here)
- Apr 9, 2026 Security Advisory (2 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-r6v6-qfmc-3r3v
vulnetix vdb fixes GHSA-r6v6-qfmc-3r3vOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-r6v6-qfmc-3r3v/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f647d7c155f069c1a068030255c300663516420e url
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f647d7c155f069c1a068030255c300663516420e url
- http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html url
- http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html url
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html url
- https://bugzilla.redhat.com/show_bug.cgi?id=1177260 url
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html url
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html url
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:058 url
- http://www.openwall.com/lists/oss-security/2014/12/25/1 url
- https://nvd.nist.gov/vuln/detail/CVE-2014-9419 advisory
- http://rhn.redhat.com/errata/RHSA-2015-1081.html url
- http://www.securityfocus.com/bid/71794 url
- http://www.ubuntu.com/usn/USN-2542-1 advisory
- https://github.com/torvalds/linux/commit/f647d7c155f069c1a068030255c300663516420e fix
- http://www.debian.org/security/2015/dsa-3128 advisory
- http://www.ubuntu.com/usn/USN-2515-1 advisory
- http://www.ubuntu.com/usn/USN-2517-1 advisory
- http://www.ubuntu.com/usn/USN-2541-1 advisory
- http://www.ubuntu.com/usn/USN-2516-1 advisory
…and 1 more