https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:55:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-09846 bdu:2015-09846 https://cve.radiocsirt.org/vuln/bdu:2015-09846 https://cve.radiocsirt.org/vuln/bell-cve-2014-9419 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2014-9419 https://cve.radiocsirt.org/vuln/certfr-2015-avi-026 certfr-2015-avi-026 https://cve.radiocsirt.org/vuln/certfr-2015-avi-026 https://cve.radiocsirt.org/vuln/cnvd-2014-09230 cnvd-2014-09230 https://cve.radiocsirt.org/vuln/cnvd-2014-09230 https://cve.radiocsirt.org/vuln/euvd-2026-103813 EUVD-2026-103813 https://cve.radiocsirt.org/vuln/euvd-2026-103813 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9419 <p>The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.</p> <p>The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-9419 https://cve.radiocsirt.org/vuln/ghsa-r6v6-qfmc-3r3v <p>The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.</p> <p>The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.</p> https://cve.radiocsirt.org/vuln/ghsa-r6v6-qfmc-3r3v https://cve.radiocsirt.org/vuln/gsd-2014-9419 gsd-2014-9419 https://cve.radiocsirt.org/vuln/gsd-2014-9419 https://cve.radiocsirt.org/vuln/rhsa-2015:1081 <p>kernel: partial ASLR bypass through TLS base addresses leak Kernel: fs: isofs: infinite loop in CE record entries kernel: ASLR bruteforce possible for vdso library kernel: pipe: iovec overrun leading to memory corruption Kernel: crypto: buffer overruns in RFC4106 implementation using AESNI</p> <p>kernel: partial ASLR bypass through TLS base addresses leak Kernel: fs: isofs: infinite loop in CE record entries kernel: ASLR bruteforce possible for vdso library kernel: pipe: iovec overrun leading to memory corruption Kernel: crypto: buffer overruns in RFC4106 implementation using AESNI</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1081 https://cve.radiocsirt.org/vuln/rhsa-2015:2152 <p>kernel: kvm: reporting emulation failures to userspace kernel: crypto api unprivileged arbitrary module load via request_module() kernel: kvm: noncanonical rip after emulation kernel: kvm: reporting emulation failures to userspace kernel: memcg: OOM handling DoS kernel: partial ASLR bypass through TLS base addresses leak kernel: crypto api unprivileged arbitrary module load via request_module() kernel: kvm: insufficient sysenter emulation when invoked from 16-bit code Kernel: vfs: Do not allow escaping from bind mounts kernel: zero page memory arbitrary modification kernel: race condition between chown() and execve() kernel: pty layer race condition on tty ldisc shutdown. kernel: Creating multiple sockets when SCTP module isn&#39;t loaded leads to kernel panic kernel: perf on ppc64 can loop forever getting userlevel stacktraces kernel: nfnetlink race in NETLINK_NFLOG socket creation kernel: Unauthorized access to IPC objects with SysV shm kernel: securelevel disabled after kexec kernel: MTU value is not validated in IPv6 stack causing packet loss kernel: pipe buffer state corruption after unsuccessful atomic read from pipe</p> <p>kernel: kvm: reporting emulation failures to userspace kernel: crypto api unprivileged arbitrary module load via request_module() kernel: kvm: noncanonical rip after emulation kernel: kvm: reporting emulation failures to userspace kernel: memcg: OOM handling DoS kernel: partial ASLR bypass through TLS base addresses leak kernel: crypto api unprivileged arbitrary module load via request_module() kernel: kvm: insufficient sysenter emulation when invoked from 16-bit code Kernel: vfs: Do not allow escaping from bind mounts kernel: zero page memory arbitrary modification kernel: race condition between chown() and execve() kernel: pty layer race condition on tty ldisc shutdown. kernel: Creating multiple sockets when SCTP module isn&#39;t loaded leads to kernel panic kernel: perf on ppc64 can loop forever getting userlevel stacktraces kernel: nfnetlink race in NETLINK_NFLOG socket creation kernel: Unauthorized access to IPC objects with SysV shm kernel: securelevel disabled after kexec kernel: MTU value is not validated in IPv6 stack causing packet loss kernel: pipe buffer state corruption after unsuccessful atomic read from pipe</p> https://cve.radiocsirt.org/vuln/rhsa-2015:2152 https://cve.radiocsirt.org/vuln/suse-ru-2015:0621-1 <p>Security update for Linux kernel</p> <p>Security update for Linux kernel</p> https://cve.radiocsirt.org/vuln/suse-ru-2015:0621-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-9419 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-lts-utopic, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-hwe, Ubuntu:18.04:LTS: linux-hwe-edge, Ubuntu:20.04:LTS: linux-azure-fde, Ubuntu:Pro:20.04:LTS: linux-azure-fde-5.15, Ubuntu:20.04:LTS: linux-gke, Ubuntu:20.04:LTS: linux-gkeop and 12 more</p> <p>The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-lts-utopic, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-hwe, Ubuntu:18.04:LTS: linux-hwe-edge, Ubuntu:20.04:LTS: linux-azure-fde, Ubuntu:Pro:20.04:LTS: linux-azure-fde-5.15, Ubuntu:20.04:LTS: linux-gke, Ubuntu:20.04:LTS: linux-gkeop and 12 more</p> <p>The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-9419