CVE-2014-8133: Low severity Linux Linux kernel vulnerability

Q: What is the severity of CVE-2014-8133?

CVE-2014-8133 is classified as a medium severity vulnerability.

Q: How do I fix CVE-2014-8133?

To fix CVE-2014-8133, upgrade your Linux kernel to a version higher than 3.18.1.

Q: What types of systems are affected by CVE-2014-8133?

CVE-2014-8133 affects local users on Linux systems running kernels up to version 3.18.1.

Q: Is CVE-2014-8133 remotely exploitable?

No, CVE-2014-8133 can only be exploited by local users who have access to the affected system.

Q: What are the potential impacts of CVE-2014-8133?

The vulnerability allows local users to bypass ASLR protection, potentially leading to privilege escalation.

Published Dec 10, 2014

Updated

arch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mechanism, via a crafted application that makes a setthreadarea system call and later reads a 16-bit value.

Other sources

It was found that espfix funcionality (when returning to userspace with a 16 bit stack, the CPU will not restore the high word(s) of stack pointer for us on executing iret and thus potentially leaks kernel addresses; espfix fixes this) can be bypassed by installing 16-bit RW data segment into GDT instead of LDT (which espfix checks for) and using it for stack.

A local unprivileged user could potentially use this flaw to leak kernel stack addresses.

Acknowledgements:

Red Hat would like to thank Andy Lutomirski for reporting this issue.

— Red Hat

Affected Software

457 affected componentsFixes available

Linux Linux kernel<=3.18.1

Linux Linux kernel=3.0-rc1

Linux Linux kernel=3.0-rc2

Linux Linux kernel=3.0-rc3

Linux Linux kernel=3.0-rc4

Linux Linux kernel=3.0-rc5

Linux Linux kernel=3.0-rc6

Linux Linux kernel=3.0-rc7

Linux Linux kernel=3.0.1

Linux Linux kernel=3.0.2

Linux Linux kernel=3.0.3

Linux Linux kernel=3.0.4

Linux Linux kernel=3.0.5

Linux Linux kernel=3.0.6

Linux Linux kernel=3.0.7

Linux Linux kernel=3.0.8

Linux Linux kernel=3.0.9

Linux Linux kernel=3.0.10

Linux Linux kernel=3.0.11

Linux Linux kernel=3.0.12

Linux Linux kernel=3.0.13

Linux Linux kernel=3.0.14

Linux Linux kernel=3.0.15

Linux Linux kernel=3.0.16

Linux Linux kernel=3.0.17

Linux Linux kernel=3.0.18

Linux Linux kernel=3.0.19

Linux Linux kernel=3.0.20

Linux Linux kernel=3.0.21

Linux Linux kernel=3.0.22

Linux Linux kernel=3.0.23

Linux Linux kernel=3.0.24

Linux Linux kernel=3.0.25

Linux Linux kernel=3.0.26

Linux Linux kernel=3.0.27

Linux Linux kernel=3.0.28

Linux Linux kernel=3.0.29

Linux Linux kernel=3.0.30

Linux Linux kernel=3.0.31

Linux Linux kernel=3.0.32

Linux Linux kernel=3.0.33

Linux Linux kernel=3.0.34

Linux Linux kernel=3.0.35

Linux Linux kernel=3.0.36

Linux Linux kernel=3.0.37

Linux Linux kernel=3.0.38

Linux Linux kernel=3.0.39

Linux Linux kernel=3.0.40

Linux Linux kernel=3.0.41

Linux Linux kernel=3.0.42

Linux Linux kernel=3.0.43

Linux Linux kernel=3.0.44

Linux Linux kernel=3.0.45

Linux Linux kernel=3.0.46

Linux Linux kernel=3.0.47

Linux Linux kernel=3.0.48

Linux Linux kernel=3.0.49

Linux Linux kernel=3.0.50

Linux Linux kernel=3.0.51

Linux Linux kernel=3.0.52

Linux Linux kernel=3.0.53

Linux Linux kernel=3.0.54

Linux Linux kernel=3.0.55

Linux Linux kernel=3.0.56

Linux Linux kernel=3.0.57

Linux Linux kernel=3.0.58

Linux Linux kernel=3.0.59

Linux Linux kernel=3.0.60

Linux Linux kernel=3.0.61

Linux Linux kernel=3.0.62

Linux Linux kernel=3.0.63

Linux Linux kernel=3.0.64

Linux Linux kernel=3.0.65

Linux Linux kernel=3.0.66

Linux Linux kernel=3.0.67

Linux Linux kernel=3.0.68

Linux Linux kernel=3.1

Linux Linux kernel=3.1-rc1

Linux Linux kernel=3.1-rc2

Linux Linux kernel=3.1-rc3

Linux Linux kernel=3.1-rc4

Linux Linux kernel=3.1.1

Linux Linux kernel=3.1.2

Linux Linux kernel=3.1.3

Linux Linux kernel=3.1.4

Linux Linux kernel=3.1.5

Linux Linux kernel=3.1.6

Linux Linux kernel=3.1.7

Linux Linux kernel=3.1.8

Linux Linux kernel=3.1.9

Linux Linux kernel=3.1.10

Linux Linux kernel=3.2

Linux Linux kernel=3.2-rc2

Linux Linux kernel=3.2-rc3

Linux Linux kernel=3.2-rc4

Linux Linux kernel=3.2-rc5

Linux Linux kernel=3.2-rc6

Linux Linux kernel=3.2-rc7

Linux Linux kernel=3.2.1

Linux Linux kernel=3.2.2

Linux Linux kernel=3.2.3

Linux Linux kernel=3.2.4

Linux Linux kernel=3.2.5

Linux Linux kernel=3.2.6

Linux Linux kernel=3.2.7

Linux Linux kernel=3.2.8

Linux Linux kernel=3.2.9

Linux Linux kernel=3.2.10

Linux Linux kernel=3.2.11

Linux Linux kernel=3.2.12

Linux Linux kernel=3.2.13

Linux Linux kernel=3.2.14

Linux Linux kernel=3.2.15

Linux Linux kernel=3.2.16

Linux Linux kernel=3.2.17

Linux Linux kernel=3.2.18

Linux Linux kernel=3.2.19

Linux Linux kernel=3.2.20

Linux Linux kernel=3.2.21

Linux Linux kernel=3.2.22

Linux Linux kernel=3.2.23

Linux Linux kernel=3.2.24

Linux Linux kernel=3.2.25

Linux Linux kernel=3.2.26

Linux Linux kernel=3.2.27

Linux Linux kernel=3.2.28

Linux Linux kernel=3.2.29

Linux Linux kernel=3.2.30

Linux Linux kernel=3.3

Linux Linux kernel=3.3-rc1

Linux Linux kernel=3.3-rc2

Linux Linux kernel=3.3-rc3

Linux Linux kernel=3.3-rc4

Linux Linux kernel=3.3-rc5

Linux Linux kernel=3.3-rc6

Linux Linux kernel=3.3-rc7

Linux Linux kernel=3.3.1

Linux Linux kernel=3.3.2

Linux Linux kernel=3.3.3

Linux Linux kernel=3.3.4

Linux Linux kernel=3.3.5

Linux Linux kernel=3.3.6

Linux Linux kernel=3.3.7

Linux Linux kernel=3.3.8

Linux Linux kernel=3.4

Linux Linux kernel=3.4-rc1

Linux Linux kernel=3.4-rc2

Linux Linux kernel=3.4-rc3

Linux Linux kernel=3.4-rc4

Linux Linux kernel=3.4-rc5

Linux Linux kernel=3.4-rc6

Linux Linux kernel=3.4-rc7

Linux Linux kernel=3.4.1

Linux Linux kernel=3.4.2

Linux Linux kernel=3.4.3

Linux Linux kernel=3.4.4

Linux Linux kernel=3.4.5

Linux Linux kernel=3.4.6

Linux Linux kernel=3.4.7

Linux Linux kernel=3.4.8

Linux Linux kernel=3.4.9

Linux Linux kernel=3.4.10

Linux Linux kernel=3.4.11

Linux Linux kernel=3.4.12

Linux Linux kernel=3.4.13

Linux Linux kernel=3.4.14

Linux Linux kernel=3.4.15

Linux Linux kernel=3.4.16

Linux Linux kernel=3.4.17

Linux Linux kernel=3.4.18

Linux Linux kernel=3.4.19

Linux Linux kernel=3.4.20

Linux Linux kernel=3.4.21

Linux Linux kernel=3.4.22

Linux Linux kernel=3.4.23

Linux Linux kernel=3.4.24

Linux Linux kernel=3.4.25

Linux Linux kernel=3.4.26

Linux Linux kernel=3.4.27

Linux Linux kernel=3.4.28

Linux Linux kernel=3.4.29

Linux Linux kernel=3.4.30

Linux Linux kernel=3.4.31

Linux Linux kernel=3.4.32

Linux Linux kernel=3.4.33

Linux Linux kernel=3.4.34

Linux Linux kernel=3.4.35

Linux Linux kernel=3.4.36

Linux Linux kernel=3.4.37

Linux Linux kernel=3.4.38

Linux Linux kernel=3.4.39

Linux Linux kernel=3.4.40

Linux Linux kernel=3.4.41

Linux Linux kernel=3.4.42

Linux Linux kernel=3.4.43

Linux Linux kernel=3.4.44

Linux Linux kernel=3.4.45

Linux Linux kernel=3.4.46

Linux Linux kernel=3.4.47

Linux Linux kernel=3.4.48

Linux Linux kernel=3.4.49

Linux Linux kernel=3.4.50

Linux Linux kernel=3.4.51

Linux Linux kernel=3.4.52

Linux Linux kernel=3.4.53

Linux Linux kernel=3.4.54

Linux Linux kernel=3.4.55

Linux Linux kernel=3.4.56

Linux Linux kernel=3.4.57

Linux Linux kernel=3.4.58

Linux Linux kernel=3.4.59

Linux Linux kernel=3.4.60

Linux Linux kernel=3.4.61

Linux Linux kernel=3.4.62

Linux Linux kernel=3.4.63

Linux Linux kernel=3.4.64

Linux Linux kernel=3.4.65

Linux Linux kernel=3.4.66

Linux Linux kernel=3.4.67

Linux Linux kernel=3.4.68

Linux Linux kernel=3.4.69

Linux Linux kernel=3.4.70

Linux Linux kernel=3.4.71

Linux Linux kernel=3.4.72

Linux Linux kernel=3.4.73

Linux Linux kernel=3.4.74

Linux Linux kernel=3.4.75

Linux Linux kernel=3.4.76

Linux Linux kernel=3.4.77

Linux Linux kernel=3.4.78

Linux Linux kernel=3.4.79

Linux Linux kernel=3.5.1

Linux Linux kernel=3.5.2

Linux Linux kernel=3.5.3

Linux Linux kernel=3.5.4

Linux Linux kernel=3.5.5

Linux Linux kernel=3.5.6

Linux Linux kernel=3.5.7

Linux Linux kernel=3.6

Linux Linux kernel=3.6.1

Linux Linux kernel=3.6.2

Linux Linux kernel=3.6.3

Linux Linux kernel=3.6.4

Linux Linux kernel=3.6.5

Linux Linux kernel=3.6.6

Linux Linux kernel=3.6.7

Linux Linux kernel=3.6.8

Linux Linux kernel=3.6.9

Linux Linux kernel=3.6.10

Linux Linux kernel=3.6.11

Linux Linux kernel=3.7

Linux Linux kernel=3.7.1

Linux Linux kernel=3.7.2

Linux Linux kernel=3.7.3

Linux Linux kernel=3.7.4

Linux Linux kernel=3.7.5

Linux Linux kernel=3.7.6

Linux Linux kernel=3.7.7

Linux Linux kernel=3.7.8

Linux Linux kernel=3.7.9

Linux Linux kernel=3.7.10

Linux Linux kernel=3.8.0

Linux Linux kernel=3.8.1

Linux Linux kernel=3.8.2

Linux Linux kernel=3.8.3

Linux Linux kernel=3.8.4

Linux Linux kernel=3.8.5

Linux Linux kernel=3.8.6

Linux Linux kernel=3.8.7

Linux Linux kernel=3.8.8

Linux Linux kernel=3.8.9

Linux Linux kernel=3.8.10

Linux Linux kernel=3.8.11

Linux Linux kernel=3.8.12

Linux Linux kernel=3.8.13

Linux Linux kernel=3.9-rc1

Linux Linux kernel=3.9-rc2

Linux Linux kernel=3.9-rc3

Linux Linux kernel=3.9-rc4

Linux Linux kernel=3.9-rc5

Linux Linux kernel=3.9-rc6

Linux Linux kernel=3.9-rc7

Linux Linux kernel=3.9.0

Linux Linux kernel=3.9.1

Linux Linux kernel=3.9.2

Linux Linux kernel=3.9.3

Linux Linux kernel=3.9.4

Linux Linux kernel=3.9.5

Linux Linux kernel=3.9.6

Linux Linux kernel=3.9.7

Linux Linux kernel=3.9.8

Linux Linux kernel=3.9.9

Linux Linux kernel=3.9.10

Linux Linux kernel=3.9.11

Linux Linux kernel=3.10

Linux Linux kernel=3.10.0

Linux Linux kernel=3.10.1

Linux Linux kernel=3.10.2

Linux Linux kernel=3.10.3

Linux Linux kernel=3.10.4

Linux Linux kernel=3.10.5

Linux Linux kernel=3.10.6

Linux Linux kernel=3.10.7

Linux Linux kernel=3.10.8

Linux Linux kernel=3.10.9

Linux Linux kernel=3.10.10

Linux Linux kernel=3.10.11

Linux Linux kernel=3.10.12

Linux Linux kernel=3.10.13

Linux Linux kernel=3.10.14

Linux Linux kernel=3.10.15

Linux Linux kernel=3.10.16

Linux Linux kernel=3.10.17

Linux Linux kernel=3.10.18

Linux Linux kernel=3.10.19

Linux Linux kernel=3.10.20

Linux Linux kernel=3.10.21

Linux Linux kernel=3.10.22

Linux Linux kernel=3.10.23

Linux Linux kernel=3.10.24

Linux Linux kernel=3.10.25

Linux Linux kernel=3.10.26

Linux Linux kernel=3.10.27

Linux Linux kernel=3.10.28

Linux Linux kernel=3.10.29

Linux Linux kernel=3.11

Linux Linux kernel=3.11.1

Linux Linux kernel=3.11.2

Linux Linux kernel=3.11.3

Linux Linux kernel=3.11.4

Linux Linux kernel=3.11.5

Linux Linux kernel=3.11.6

Linux Linux kernel=3.11.7

Linux Linux kernel=3.11.8

Linux Linux kernel=3.11.9

Linux Linux kernel=3.11.10

Linux Linux kernel=3.12

Linux Linux kernel=3.12.1

Linux Linux kernel=3.12.2

Linux Linux kernel=3.12.3

Linux Linux kernel=3.12.4

Linux Linux kernel=3.12.5

Linux Linux kernel=3.12.6

Linux Linux kernel=3.12.7

Linux Linux kernel=3.12.8

Linux Linux kernel=3.12.9

Linux Linux kernel=3.12.10

Linux Linux kernel=3.12.11

Linux Linux kernel=3.12.12

Linux Linux kernel=3.12.13

Linux Linux kernel=3.12.14

Linux Linux kernel=3.12.15

Linux Linux kernel=3.12.16

Linux Linux kernel=3.12.17

Linux Linux kernel=3.13

Linux Linux kernel=3.13.1

Linux Linux kernel=3.13.2

Linux Linux kernel=3.13.3

Linux Linux kernel=3.13.4

Linux Linux kernel=3.13.5

Linux Linux kernel=3.13.6

Linux Linux kernel=3.13.7

Linux Linux kernel=3.13.8

Linux Linux kernel=3.13.9

Linux Linux kernel=3.13.10

Linux Linux kernel=3.13.11

Linux Linux kernel=3.14

Linux Linux kernel=3.14-rc1

Linux Linux kernel=3.14-rc2

Linux Linux kernel=3.14-rc3

Linux Linux kernel=3.14-rc4

Linux Linux kernel=3.14-rc5

Linux Linux kernel=3.14-rc6

Linux Linux kernel=3.14-rc7

Linux Linux kernel=3.14-rc8

Linux Linux kernel=3.14.1

Linux Linux kernel=3.14.2

Linux Linux kernel=3.14.3

Linux Linux kernel=3.14.4

Linux Linux kernel=3.14.5

Linux Linux kernel=3.15

Linux Linux kernel=3.15.1

Linux Linux kernel=3.15.2

Linux Linux kernel=3.15.3

Linux Linux kernel=3.15.4

Linux Linux kernel=3.15.5

Linux Linux kernel=3.15.6

Linux Linux kernel=3.15.7

Linux Linux kernel=3.15.8

Linux Linux kernel=3.16.0

Linux Linux kernel=3.16.1

Linux Linux kernel=3.17

Linux Linux kernel=3.17.1

Linux Linux kernel=3.17.2

Linux Linux kernel=3.17.3

Linux Linux kernel=3.17.4

Linux Linux kernel=3.18-rc1

debian/linux

5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-1

ubuntu/linux<3.13.0-46.75

3.13.0-46.75

ubuntu/linux-lts-utopic<3.16.0-31.41~14.04.1

3.16.0-31.41~14.04.1

ubuntu/linux-azure*

ubuntu/linux-gcp*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-azure-fde*

ubuntu/linux-azure-fde-5.15*

ubuntu/linux-gke*

ubuntu/linux-gkeop*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-azure-6.11*

ubuntu/linux-gcp-6.11*

ubuntu/linux-hwe-6.11*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 3.13.0-46.75
Upgrade
Upgrade ubuntu/linux-lts-utopic to a version that resolves this vulnerability.
Fixed in 3.16.0-31.41~14.04.1

Event History

Dec 10, 2014

Data Sourced

via Red Hat·06:48 PM

DescriptionSeverityAffected Software

Dec 17, 2014

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-8133?

CVE-2014-8133 is classified as a medium severity vulnerability.

How do I fix CVE-2014-8133?

To fix CVE-2014-8133, upgrade your Linux kernel to a version higher than 3.18.1.

What types of systems are affected by CVE-2014-8133?

CVE-2014-8133 affects local users on Linux systems running kernels up to version 3.18.1.

Is CVE-2014-8133 remotely exploitable?

No, CVE-2014-8133 can only be exploited by local users who have access to the affected system.

What are the potential impacts of CVE-2014-8133?

The vulnerability allows local users to bypass ASLR protection, potentially leading to privilege escalation.

CVE-2014-8133: Low severity Linux Linux kernel vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2014-8133?

How do I fix CVE-2014-8133?

What types of systems are affected by CVE-2014-8133?

Is CVE-2014-8133 remotely exploitable?

What are the potential impacts of CVE-2014-8133?

Company

Resources

Contact