CVE-2014-9585
CVE-2014-9585
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.
EPSS 0.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
linux Debian:12
- Affected ranges
- ECOSYSTEM: < 3.16.7-ckt4-1
Update to 3.16.7-ckt4-1
linux Debian:13
- Affected ranges
- ECOSYSTEM: < 3.16.7-ckt4-1
Update to 3.16.7-ckt4-1
linux Debian:14
- Affected ranges
- ECOSYSTEM: < 3.16.7-ckt4-1
Update to 3.16.7-ckt4-1
linux Ubuntu:14.04:LTS
- Versions
- 3.11.0-12.19
- 3.12.0-1.3
- 3.12.0-2.5
- 3.12.0-2.7
- 3.12.0-3.8
- 3.12.0-3.9
- 3.12.0-4.10
- 3.12.0-4.12
- 3.12.0-5.13
- 3.12.0-7.15
- 3.13.0-1.16
- 3.13.0-2.17
- 3.13.0-3.18
- 3.13.0-4.19
- 3.13.0-5.20
- 3.13.0-6.23
- 3.13.0-7.25
- 3.13.0-7.26
- 3.13.0-8.27
- 3.13.0-8.28
- 3.13.0-10.30
- 3.13.0-11.31
- 3.13.0-12.32
- 3.13.0-13.33
- 3.13.0-14.34
- 3.13.0-15.35
- 3.13.0-16.36
- 3.13.0-17.37
- 3.13.0-18.38
- 3.13.0-19.39
- 3.13.0-19.40
- 3.13.0-20.42
- 3.13.0-21.43
- 3.13.0-22.44
- 3.13.0-23.45
- 3.13.0-24.46
- 3.13.0-24.47
- 3.13.0-27.50
- 3.13.0-29.53
- 3.13.0-30.54
- 3.13.0-30.55
- 3.13.0-32.57
- 3.13.0-33.58
- 3.13.0-34.60
- 3.13.0-35.62
- 3.13.0-36.63
- 3.13.0-37.64
- 3.13.0-39.66
- 3.13.0-40.69
- 3.13.0-41.70
- 3.13.0-43.72
- 3.13.0-44.73
- 3.13.0-45.74
- Affected ranges
- ECOSYSTEM: < 3.13.0-46.75
Update to 3.13.0-46.75
linux-lts-utopic Ubuntu:14.04:LTS
- Versions
- 3.16.0-25.33~14.04.2
- 3.16.0-26.35~14.04.1
- 3.16.0-28.37~14.04.1
- 3.16.0-28.38~14.04.1
- 3.16.0-29.39~14.04.1
- 3.16.0-30.40~14.04.1
- Affected ranges
- ECOSYSTEM: < 3.16.0-31.41~14.04.1
Update to 3.16.0-31.41~14.04.1
linux-azure Ubuntu:18.04:LTS
- Versions
- 4.15.0-1002.2
- 4.15.0-1003.3
- 4.15.0-1004.4
- 4.15.0-1008.8
- 4.15.0-1009.9
- 4.15.0-1012.12
- 4.15.0-1013.13
- 4.15.0-1014.14
- 4.15.0-1018.18
- 4.15.0-1019.19
- 4.15.0-1021.21
- 4.15.0-1022.23
- 4.15.0-1023.24
- 4.15.0-1025.26
- 4.15.0-1028.29
- 4.15.0-1030.31
- 4.15.0-1031.32
- 4.15.0-1032.33
- 4.15.0-1035.36
- 4.15.0-1036.38
- 4.15.0-1037.39
- 4.18.0-1011.11~18.04.1
- 4.18.0-1013.13~18.04.1
- 4.18.0-1014.14~18.04.1
- 4.18.0-1018.18~18.04.1
- 4.18.0-1019.19~18.04.1
- 4.18.0-1020.20~18.04.1
- 4.18.0-1023.24~18.04.1
- 4.18.0-1024.25~18.04.1
- 4.18.0-1025.27~18.04.1
- 5.0.0-1014.14~18.04.1
- 5.0.0-1016.17~18.04.1
- 5.0.0-1018.19~18.04.1
- 5.0.0-1020.21~18.04.1
- 5.0.0-1022.23~18.04.1
- 5.0.0-1023.24~18.04.1
- 5.0.0-1025.27~18.04.1
- 5.0.0-1027.29~18.04.1
- 5.0.0-1028.30~18.04.1
- 5.0.0-1029.31~18.04.1
- 5.0.0-1031.33
- 5.0.0-1032.34
- 5.0.0-1035.37
- 5.0.0-1036.38
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-gcp Ubuntu:18.04:LTS
- Versions
- 4.15.0-1001.1
- 4.15.0-1003.3
- 4.15.0-1005.5
- 4.15.0-1006.6
- 4.15.0-1008.8
- 4.15.0-1009.9
- 4.15.0-1010.10
- 4.15.0-1014.14
- 4.15.0-1015.15
- 4.15.0-1017.18
- 4.15.0-1018.19
- 4.15.0-1019.20
- 4.15.0-1021.22
- 4.15.0-1023.24
- 4.15.0-1024.25
- 4.15.0-1025.26
- 4.15.0-1026.27
- 4.15.0-1027.28
- 4.15.0-1028.29
- 4.15.0-1029.31
- 4.15.0-1030.32
- 4.15.0-1032.34
- 4.15.0-1033.35
- 4.15.0-1034.36
- 4.15.0-1036.38
- 4.15.0-1037.39
- 4.15.0-1040.42
- 4.15.0-1042.45
- 4.15.0-1044.70
- 5.0.0-1020.20~18.04.1
- 5.0.0-1021.21~18.04.1
- 5.0.0-1025.26~18.04.1
- 5.0.0-1026.27~18.04.1
- 5.0.0-1028.29~18.04.1
- 5.0.0-1029.30~18.04.1
- 5.0.0-1031.32
- 5.0.0-1033.34
- 5.0.0-1034.35
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-hwe Ubuntu:18.04:LTS
- Versions
- 4.18.0-13.14~18.04.1
- 4.18.0-14.15~18.04.1
- 4.18.0-15.16~18.04.1
- 4.18.0-16.17~18.04.1
- 4.18.0-17.18~18.04.1
- 4.18.0-18.19~18.04.1
- 4.18.0-20.21~18.04.1
- 4.18.0-21.22~18.04.1
- 4.18.0-22.23~18.04.1
- 4.18.0-24.25~18.04.1
- 4.18.0-25.26~18.04.1
- 5.0.0-23.24~18.04.1
- 5.0.0-25.26~18.04.1
- 5.0.0-27.28~18.04.1
- 5.0.0-29.31~18.04.1
- 5.0.0-31.33~18.04.1
- 5.0.0-32.34~18.04.2
- 5.0.0-35.38~18.04.1
- 5.0.0-36.39~18.04.1
- 5.0.0-37.40~18.04.1
- 5.3.0-26.28~18.04.1
- 5.3.0-28.30~18.04.1
- 5.3.0-40.32~18.04.1
- 5.3.0-42.34~18.04.1
- 5.3.0-45.37~18.04.1
- 5.3.0-46.38~18.04.1
- 5.3.0-51.44~18.04.2
- 5.3.0-53.47~18.04.1
- 5.3.0-59.53~18.04.1
- 5.3.0-61.55~18.04.1
- 5.3.0-62.56~18.04.1
- 5.3.0-64.58~18.04.1
- 5.3.0-65.59
- 5.3.0-66.60
- 5.3.0-67.61
- 5.3.0-68.63
- 5.3.0-69.65
- 5.3.0-70.66
- 5.3.0-72.68
- 5.3.0-73.69
- 5.3.0-74.70
- 5.3.0-75.71
- 5.3.0-76.72
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-hwe-edge Ubuntu:18.04:LTS
- Versions
- 5.0.0-15.16~18.04.1
- 5.0.0-16.17~18.04.1
- 5.0.0-17.18~18.04.1
- 5.0.0-19.20~18.04.1
- 5.0.0-20.21~18.04.1
- 5.3.0-19.20~18.04.2
- 5.3.0-22.24~18.04.1
- 5.3.0-23.25~18.04.1
- 5.3.0-23.25~18.04.2
- 5.3.0-24.26~18.04.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-azure-fde Ubuntu:20.04:LTS
- Versions
- 5.4.0-1063.66+cvm2.2
- 5.4.0-1063.66+cvm3.2
- 5.4.0-1064.67+cvm1.1
- 5.4.0-1065.68+cvm2.1
- 5.4.0-1067.70+cvm1.1
- 5.4.0-1068.71+cvm1.1
- 5.4.0-1069.72+cvm1.1
- 5.4.0-1070.73+cvm1.1
- 5.4.0-1072.75+cvm1.1
- 5.4.0-1073.76+cvm1.1
- 5.4.0-1074.77+cvm1.1
- 5.4.0-1076.79+cvm1.1
- 5.4.0-1078.81+cvm1.1
- 5.4.0-1080.83+cvm1.1
- 5.4.0-1083.87+cvm1.1
- 5.4.0-1085.90+cvm1.1
- 5.4.0-1085.90+cvm2.1
- 5.4.0-1086.91+cvm1.1
- 5.4.0-1089.94+cvm1.2
- 5.4.0-1090.95+cvm1.1
- 5.4.0-1091.96+cvm1.1
- 5.4.0-1092.97+cvm1.1
- 5.4.0-1095.101+cvm1.1
- 5.4.0-1098.104+cvm1.1
- 5.4.0-1100.106+cvm1.1
- 5.4.0-1103.109+cvm1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-azure-fde-5.15 Ubuntu:Pro:20.04:LTS
- Versions
- 5.15.0-1019.24~20.04.1.1
- 5.15.0-1020.25~20.04.1.1
- 5.15.0-1021.26~20.04.1.1
- 5.15.0-1029.36~20.04.1.1
- 5.15.0-1030.37~20.04.1.1
- 5.15.0-1031.38~20.04.1.1
- 5.15.0-1033.40~20.04.1.1
- 5.15.0-1034.41~20.04.1.2
- 5.15.0-1035.42~20.04.1.1
- 5.15.0-1036.43~20.04.1.1
- 5.15.0-1037.44~20.04.1.1
- 5.15.0-1038.45~20.04.1.1
- 5.15.0-1039.46~20.04.1.1
- 5.15.0-1040.47~20.04.1.1
- 5.15.0-1041.48~20.04.1.1
- 5.15.0-1042.49~20.04.1.1
- 5.15.0-1043.50~20.04.1.1
- 5.15.0-1046.53~20.04.1.1
- 5.15.0-1047.54~20.04.1.1
- 5.15.0-1049.56~20.04.1.1
- 5.15.0-1050.57~20.04.1.1
- 5.15.0-1051.59~20.04.1.1
- 5.15.0-1052.60~20.04.1.1
- 5.15.0-1053.61~20.04.1.1
- 5.15.0-1054.62~20.04.1.1
- 5.15.0-1056.64~20.04.1.1
- 5.15.0-1057.65~20.04.1.1
- 5.15.0-1058.66~20.04.2.1
- 5.15.0-1059.67~20.04.1.1
- 5.15.0-1060.69~20.04.1.1
- 5.15.0-1061.70~20.04.1.1
- 5.15.0-1063.72~20.04.1.1
- 5.15.0-1064.73~20.04.1.1
- 5.15.0-1065.74~20.04.1.1
- 5.15.0-1067.76~20.04.1.1
- 5.15.0-1068.77~20.04.1.1
- 5.15.0-1070.79~20.04.1.1
- 5.15.0-1071.80~20.04.1.1
- 5.15.0-1072.81~20.04.1.1
- 5.15.0-1073.82~20.04.1.1
- 5.15.0-1074.83~20.04.1.1
- 5.15.0-1076.85~20.04.1.1
- 5.15.0-1078.87~20.04.1.1
- 5.15.0-1081.90~20.04.1.1
- 5.15.0-1082.91~20.04.1.1
- 5.15.0-1086.95~20.04.1.1
- 5.15.0-1087.96~20.04.1.1
- 5.15.0-1088.97~20.04.1.1
- 5.15.0-1089.98~20.04.1.1
- 5.15.0-1091.100~20.04.1.1
- 5.15.0-1094.103~20.04.1.1
- 5.15.0-1096.105~20.04.1.1
- 5.15.0-1097.106~20.04.1.1
- 5.15.0-1098.107~20.04.1.1
- 5.15.0-1102.111~20.04.1.1
- 5.15.0-1103.112~20.04.1.1
- 5.15.0-1111.120~20.04.1.1
- 5.15.0-1114.123~20.04.1
- 5.15.0-1116.125~20.04.1
- 5.15.0-1117.126~20.04.2
- 5.15.0-1118.127~20.04.1
- 5.15.0-1119.128~20.04.1
- 5.15.0-1120.129~20.04.1
- 5.15.0-1121.130~20.04.1
- 5.15.0-1122.131~20.04.1
- 5.15.0-1124.133~20.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-gke Ubuntu:20.04:LTS
- Versions
- 5.4.0-1033.35
- 5.4.0-1035.37
- 5.4.0-1036.38
- 5.4.0-1037.39
- 5.4.0-1039.41
- 5.4.0-1041.43
- 5.4.0-1042.44
- 5.4.0-1043.45
- 5.4.0-1044.46
- 5.4.0-1046.48
- 5.4.0-1049.52
- 5.4.0-1051.54
- 5.4.0-1052.55
- 5.4.0-1053.56
- 5.4.0-1054.57
- 5.4.0-1055.58
- 5.4.0-1056.59
- 5.4.0-1057.60
- 5.4.0-1059.62
- 5.4.0-1061.64
- 5.4.0-1062.65
- 5.4.0-1063.66
- 5.4.0-1065.68
- 5.4.0-1066.69
- 5.4.0-1067.70
- 5.4.0-1068.71
- 5.4.0-1071.76
- 5.4.0-1072.77
- 5.4.0-1074.79
- 5.4.0-1076.82
- 5.4.0-1078.84
- 5.4.0-1080.86
- 5.4.0-1081.87
- 5.4.0-1083.89
- 5.4.0-1084.90
- 5.4.0-1086.93
- 5.4.0-1087.94
- 5.4.0-1090.97
- 5.4.0-1091.98
- 5.4.0-1094.101
- 5.4.0-1095.102
- 5.4.0-1096.103
- 5.4.0-1097.104
- 5.4.0-1098.105
- 5.4.0-1099.106
- 5.4.0-1100.107
- 5.4.0-1101.108
- 5.4.0-1102.109
- 5.4.0-1103.110
- 5.4.0-1104.111
- 5.4.0-1105.112
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-gkeop Ubuntu:20.04:LTS
- Versions
- 5.4.0-1008.9
- 5.4.0-1009.10
- 5.4.0-1010.11
- 5.4.0-1011.12
- 5.4.0-1012.13
- 5.4.0-1013.14
- 5.4.0-1014.15
- 5.4.0-1015.16
- 5.4.0-1016.17
- 5.4.0-1018.19
- 5.4.0-1021.22
- 5.4.0-1022.23
- 5.4.0-1023.24
- 5.4.0-1024.25
- 5.4.0-1025.26
- 5.4.0-1026.27
- 5.4.0-1027.28
- 5.4.0-1029.30
- 5.4.0-1031.32
- 5.4.0-1032.33
- 5.4.0-1033.34
- 5.4.0-1034.35
- 5.4.0-1036.37
- 5.4.0-1037.38
- 5.4.0-1038.39
- 5.4.0-1039.40
- 5.4.0-1040.41
- 5.4.0-1043.44
- 5.4.0-1046.48
- 5.4.0-1048.51
- 5.4.0-1049.52
- 5.4.0-1051.54
- 5.4.0-1052.55
- 5.4.0-1053.56
- 5.4.0-1054.57
- 5.4.0-1056.60
- 5.4.0-1057.61
- 5.4.0-1060.64
- 5.4.0-1061.65
- 5.4.0-1062.66
- 5.4.0-1064.68
- 5.4.0-1065.69
- 5.4.0-1066.70
- 5.4.0-1067.71
- 5.4.0-1068.72
- 5.4.0-1069.73
- 5.4.0-1070.74
- 5.4.0-1071.75
- 5.4.0-1072.76
- 5.4.0-1073.77
- 5.4.0-1074.78
- 5.4.0-1075.79
- 5.4.0-1076.80
- 5.4.0-1077.81
- 5.4.0-1078.82
- 5.4.0-1079.83
- 5.4.0-1080.84
- 5.4.0-1081.85
- 5.4.0-1083.87
- 5.4.0-1084.88
- 5.4.0-1085.89
- 5.4.0-1086.90
- 5.4.0-1087.91
- 5.4.0-1088.92
- 5.4.0-1089.93
- 5.4.0-1090.94
- 5.4.0-1091.95
- 5.4.0-1092.96
- 5.4.0-1093.97
- 5.4.0-1094.98
- 5.4.0-1095.99
- 5.4.0-1096.100
- 5.4.0-1097.101
- 5.4.0-1098.102
- 5.4.0-1099.103
- 5.4.0-1100.104
- 5.4.0-1101.105
- 5.4.0-1102.106
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-raspi2 Ubuntu:20.04:LTS
- Versions
- 5.3.0-1007.8
- 5.3.0-1014.16
- 5.3.0-1015.17
- 5.3.0-1017.19
- 5.4.0-1004.4
- 5.4.0-1006.6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-riscv Ubuntu:20.04:LTS
- Versions
- 5.4.0-24.28
- 5.4.0-26.30
- 5.4.0-27.31
- 5.4.0-28.32
- 5.4.0-30.34
- 5.4.0-31.35
- 5.4.0-33.37
- 5.4.0-34.38
- 5.4.0-36.41
- 5.4.0-37.42
- 5.4.0-39.44
- 5.4.0-40.45
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-intel-iot-realtime Ubuntu:22.04:LTS
- Versions
- 5.15.0-1073.75
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-realtime Ubuntu:22.04:LTS
- Versions
- 5.15.0-1032.35
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-riscv Ubuntu:22.04:LTS
- Versions
- 5.13.0-1004.4
- 5.13.0-1006.6+22.04.1
- 5.13.0-1007.7+22.04.1
- 5.13.0-1010.11+22.04.1
- 5.15.0-1004.4
- 5.15.0-1005.5
- 5.15.0-1006.6
- 5.15.0-1007.7
- 5.15.0-1008.8
- 5.15.0-1011.12
- 5.15.0-1012.13
- 5.15.0-1014.16
- 5.15.0-1015.17
- 5.15.0-1016.18
- 5.15.0-1017.19
- 5.15.0-1018.21
- 5.15.0-1019.22
- 5.15.0-1020.23
- 5.15.0-1022.26
- 5.15.0-1023.27
- 5.15.0-1026.30
- 5.15.0-1027.31
- 5.15.0-1028.32
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-azure-6.11 Ubuntu:24.04:LTS
- Versions
- 6.11.0-1008.8~24.04.1
- 6.11.0-1012.12~24.04.1
- 6.11.0-1013.13~24.04.1
- 6.11.0-1014.14~24.04.1
- 6.11.0-1015.15~24.04.1
- 6.11.0-1017.17~24.04.1
- 6.11.0-1018.18~24.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-gcp-6.11 Ubuntu:24.04:LTS
- Versions
- 6.11.0-1006.6~24.04.2
- 6.11.0-1011.11~24.04.1
- 6.11.0-1013.13~24.04.1
- 6.11.0-1014.14~24.04.1
- 6.11.0-1015.15~24.04.1
- 6.11.0-1016.16~24.04.1
- 6.11.0-1017.17~24.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-hwe-6.11 Ubuntu:24.04:LTS
- Versions
- 6.11.0-17.17~24.04.2
- 6.11.0-19.19~24.04.1
- 6.11.0-21.21~24.04.1
- 6.11.0-24.24~24.04.1
- 6.11.0-25.25~24.04.1
- 6.11.0-26.26~24.04.1
- 6.11.0-28.28~24.04.1
- 6.11.0-29.29~24.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-lowlatency-hwe-6.11 Ubuntu:24.04:LTS
- Versions
- 6.11.0-1009.10~24.04.1
- 6.11.0-1011.12~24.04.1
- 6.11.0-1012.13~24.04.1
- 6.11.0-1013.14~24.04.1
- 6.11.0-1014.15~24.04.1
- 6.11.0-1015.16~24.04.2
- 6.11.0-1016.17~24.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-raspi-realtime Ubuntu:24.04:LTS
- Versions
- 6.8.0-2019.20
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- http://git.kernel.org/?p=linux/kernel/git/tip/tip.git%3Ba=commit%3Bh=fbe1bf140671619508dfa575d74a185ae53c5dbb
- http://www.ubuntu.com/usn/USN-2515-1
- http://www.debian.org/security/2015/dsa-3170
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html
- http://rhn.redhat.com/errata/RHSA-2015-1778.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html
- http://www.ubuntu.com/usn/USN-2514-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148480.html
- http://www.openwall.com/lists/oss-security/2015/01/09/8
- http://www.ubuntu.com/usn/USN-2518-1
- http://rhn.redhat.com/errata/RHSA-2015-1787.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:058
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
- http://www.securityfocus.com/bid/71990
- http://www.openwall.com/lists/oss-security/2014/12/09/10
- http://www.ubuntu.com/usn/USN-2517-1
- http://v0ids3curity.blogspot.in/2014/12/return-to-vdso-using-elf-auxiliary.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html
- http://www.ubuntu.com/usn/USN-2516-1
- http://www.ubuntu.com/usn/USN-2513-1
- http://git.kernel.org/?p=linux/kernel/git/luto/linux.git%3Ba=commit%3Bh=bc3b94c31d65e761ddfe150d02932c65971b74e2
- https://nvd.nist.gov/vuln/detail/CVE-2014-9585