Skip to main content

CVE-2014-9585

Description​

The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.

nvd
CVE ID: CVE-2014-9585
Base Score: 2.1
Base Severity: LOW
Vector String:AV:L/AC:L/Au:N/C:N/I:P/A:N

Refrence: NVD