CVE-2014-8133: Low severity linux kernel vulnerability
Published Dec 10, 2014
·Updated
arch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mechanism, via a crafted application that makes a setthreadarea system call and later reads a 16-bit value.
Other sources
It was found that espfix funcionality (when returning to userspace with a 16 bit stack, the CPU will not restore the high word(s) of stack pointer for us on executing iret and thus potentially leaks kernel addresses; espfix fixes this) can be bypassed by installing 16-bit RW data segment into GDT instead of LDT (which espfix checks for) and using it for stack.
A local unprivileged user could potentially use this flaw to leak kernel stack addresses.
Acknowledgements:
Red Hat would like to thank Andy Lutomirski for reporting this issue.
— Red Hat
Affected Software
435 affected componentsFixes available
Linux Linux kernel<=3.18.1
Linux Linux kernel=3.0-rc1
Linux Linux kernel=3.0-rc2
Linux Linux kernel=3.0-rc3
Linux Linux kernel=3.0-rc4
Linux Linux kernel=3.0-rc5
Linux Linux kernel=3.0-rc6
Linux Linux kernel=3.0-rc7
Linux Linux kernel=3.0.1
Linux Linux kernel=3.0.2
Linux Linux kernel=3.0.3
Linux Linux kernel=3.0.4
Linux Linux kernel=3.0.5
Linux Linux kernel=3.0.6
Linux Linux kernel=3.0.7
Linux Linux kernel=3.0.8
Linux Linux kernel=3.0.9
Linux Linux kernel=3.0.10
Linux Linux kernel=3.0.11
Linux Linux kernel=3.0.12
Linux Linux kernel=3.0.13
Linux Linux kernel=3.0.14
Linux Linux kernel=3.0.15
Linux Linux kernel=3.0.16
Linux Linux kernel=3.0.17
Linux Linux kernel=3.0.18
Linux Linux kernel=3.0.19
Linux Linux kernel=3.0.20
Linux Linux kernel=3.0.21
Linux Linux kernel=3.0.22
Linux Linux kernel=3.0.23
Linux Linux kernel=3.0.24
Linux Linux kernel=3.0.25
Linux Linux kernel=3.0.26
Linux Linux kernel=3.0.27
Linux Linux kernel=3.0.28
Linux Linux kernel=3.0.29
Linux Linux kernel=3.0.30
Linux Linux kernel=3.0.31
Linux Linux kernel=3.0.32
Linux Linux kernel=3.0.33
Linux Linux kernel=3.0.34
Linux Linux kernel=3.0.35
Linux Linux kernel=3.0.36
Linux Linux kernel=3.0.37
Linux Linux kernel=3.0.38
Linux Linux kernel=3.0.39
Linux Linux kernel=3.0.40
Linux Linux kernel=3.0.41
Linux Linux kernel=3.0.42
Linux Linux kernel=3.0.43
Linux Linux kernel=3.0.44
Linux Linux kernel=3.0.45
Linux Linux kernel=3.0.46
Linux Linux kernel=3.0.47
Linux Linux kernel=3.0.48
Linux Linux kernel=3.0.49
Linux Linux kernel=3.0.50
Linux Linux kernel=3.0.51
Linux Linux kernel=3.0.52
Linux Linux kernel=3.0.53
Linux Linux kernel=3.0.54
Linux Linux kernel=3.0.55
Linux Linux kernel=3.0.56
Linux Linux kernel=3.0.57
Linux Linux kernel=3.0.58
Linux Linux kernel=3.0.59
Linux Linux kernel=3.0.60
Linux Linux kernel=3.0.61
Linux Linux kernel=3.0.62
Linux Linux kernel=3.0.63
Linux Linux kernel=3.0.64
Linux Linux kernel=3.0.65
Linux Linux kernel=3.0.66
Linux Linux kernel=3.0.67
Linux Linux kernel=3.0.68
Linux Linux kernel=3.1
Linux Linux kernel=3.1-rc1
Linux Linux kernel=3.1-rc2
Linux Linux kernel=3.1-rc3
Linux Linux kernel=3.1-rc4
Linux Linux kernel=3.1.1
Linux Linux kernel=3.1.2
Linux Linux kernel=3.1.3
Linux Linux kernel=3.1.4
Linux Linux kernel=3.1.5
Linux Linux kernel=3.1.6
Linux Linux kernel=3.1.7
Linux Linux kernel=3.1.8
Linux Linux kernel=3.1.9
Linux Linux kernel=3.1.10
Linux Linux kernel=3.2
Linux Linux kernel=3.2
Linux Linux kernel=3.2-rc2
Linux Linux kernel=3.2-rc3
Linux Linux kernel=3.2-rc4
Linux Linux kernel=3.2-rc5
Linux Linux kernel=3.2-rc6
Linux Linux kernel=3.2-rc7
Linux Linux kernel=3.2.1
Linux Linux kernel=3.2.1
Linux Linux kernel=3.2.2
Linux Linux kernel=3.2.3
Linux Linux kernel=3.2.4
Linux Linux kernel=3.2.5
Linux Linux kernel=3.2.6
Linux Linux kernel=3.2.7
Linux Linux kernel=3.2.8
Linux Linux kernel=3.2.9
Linux Linux kernel=3.2.10
Linux Linux kernel=3.2.11
Linux Linux kernel=3.2.12
Linux Linux kernel=3.2.13
Linux Linux kernel=3.2.14
Linux Linux kernel=3.2.15
Linux Linux kernel=3.2.16
Linux Linux kernel=3.2.17
Linux Linux kernel=3.2.18
Linux Linux kernel=3.2.19
Linux Linux kernel=3.2.20
Linux Linux kernel=3.2.21
Linux Linux kernel=3.2.22
Linux Linux kernel=3.2.23
Linux Linux kernel=3.2.24
Linux Linux kernel=3.2.25
Linux Linux kernel=3.2.26
Linux Linux kernel=3.2.27
Linux Linux kernel=3.2.28
Linux Linux kernel=3.2.29
Linux Linux kernel=3.2.30
Linux Linux kernel=3.3
Linux Linux kernel=3.3-rc1
Linux Linux kernel=3.3-rc2
Linux Linux kernel=3.3-rc3
Linux Linux kernel=3.3-rc4
Linux Linux kernel=3.3-rc5
Linux Linux kernel=3.3-rc6
Linux Linux kernel=3.3-rc7
Linux Linux kernel=3.3.1
Linux Linux kernel=3.3.2
Linux Linux kernel=3.3.3
Linux Linux kernel=3.3.4
Linux Linux kernel=3.3.5
Linux Linux kernel=3.3.6
Linux Linux kernel=3.3.7
Linux Linux kernel=3.3.8
Linux Linux kernel=3.4
Linux Linux kernel=3.4
Linux Linux kernel=3.4-rc1
Linux Linux kernel=3.4-rc1
Linux Linux kernel=3.4-rc2
Linux Linux kernel=3.4-rc2
Linux Linux kernel=3.4-rc3
Linux Linux kernel=3.4-rc3
Linux Linux kernel=3.4-rc4
Linux Linux kernel=3.4-rc4
Linux Linux kernel=3.4-rc5
Linux Linux kernel=3.4-rc5
Linux Linux kernel=3.4-rc6
Linux Linux kernel=3.4-rc6
Linux Linux kernel=3.4-rc7
Linux Linux kernel=3.4-rc7
Linux Linux kernel=3.4.1
Linux Linux kernel=3.4.1
Linux Linux kernel=3.4.2
Linux Linux kernel=3.4.2
Linux Linux kernel=3.4.3
Linux Linux kernel=3.4.3
Linux Linux kernel=3.4.4
Linux Linux kernel=3.4.4
Linux Linux kernel=3.4.5
Linux Linux kernel=3.4.5
Linux Linux kernel=3.4.6
Linux Linux kernel=3.4.7
Linux Linux kernel=3.4.8
Linux Linux kernel=3.4.9
Linux Linux kernel=3.4.10
Linux Linux kernel=3.4.11
Linux Linux kernel=3.4.12
Linux Linux kernel=3.4.13
Linux Linux kernel=3.4.14
Linux Linux kernel=3.4.15
Linux Linux kernel=3.4.16
Linux Linux kernel=3.4.17
Linux Linux kernel=3.4.18
Linux Linux kernel=3.4.19
Linux Linux kernel=3.4.20
Linux Linux kernel=3.4.21
Linux Linux kernel=3.4.22
Linux Linux kernel=3.4.23
Linux Linux kernel=3.4.24
Linux Linux kernel=3.4.25
Linux Linux kernel=3.4.26
Linux Linux kernel=3.4.27
Linux Linux kernel=3.4.28
Linux Linux kernel=3.4.29
Linux Linux kernel=3.4.30
Linux Linux kernel=3.4.31
Linux Linux kernel=3.4.32
Linux Linux kernel=3.4.33
Linux Linux kernel=3.4.34
Linux Linux kernel=3.4.35
Linux Linux kernel=3.4.36
Linux Linux kernel=3.4.37
Linux Linux kernel=3.4.38
Linux Linux kernel=3.4.39
Linux Linux kernel=3.4.40
Linux Linux kernel=3.4.41
Linux Linux kernel=3.4.42
Linux Linux kernel=3.4.43
Linux Linux kernel=3.4.44
Linux Linux kernel=3.4.45
Linux Linux kernel=3.4.46
Linux Linux kernel=3.4.47
Linux Linux kernel=3.4.48
Linux Linux kernel=3.4.49
Linux Linux kernel=3.4.50
Linux Linux kernel=3.4.51
Linux Linux kernel=3.4.52
Linux Linux kernel=3.4.53
Linux Linux kernel=3.4.54
Linux Linux kernel=3.4.55
Linux Linux kernel=3.4.56
Linux Linux kernel=3.4.57
Linux Linux kernel=3.4.58
Linux Linux kernel=3.4.59
Linux Linux kernel=3.4.60
Linux Linux kernel=3.4.61
Linux Linux kernel=3.4.62
Linux Linux kernel=3.4.63
Linux Linux kernel=3.4.64
Linux Linux kernel=3.4.65
Linux Linux kernel=3.4.66
Linux Linux kernel=3.4.67
Linux Linux kernel=3.4.68
Linux Linux kernel=3.4.69
Linux Linux kernel=3.4.70
Linux Linux kernel=3.4.71
Linux Linux kernel=3.4.72
Linux Linux kernel=3.4.73
Linux Linux kernel=3.4.74
Linux Linux kernel=3.4.75
Linux Linux kernel=3.4.76
Linux Linux kernel=3.4.77
Linux Linux kernel=3.4.78
Linux Linux kernel=3.4.79
Linux Linux kernel=3.5.1
Linux Linux kernel=3.5.2
Linux Linux kernel=3.5.3
Linux Linux kernel=3.5.4
Linux Linux kernel=3.5.5
Linux Linux kernel=3.5.6
Linux Linux kernel=3.5.7
Linux Linux kernel=3.6
Linux Linux kernel=3.6.1
Linux Linux kernel=3.6.2
Linux Linux kernel=3.6.3
Linux Linux kernel=3.6.4
Linux Linux kernel=3.6.5
Linux Linux kernel=3.6.6
Linux Linux kernel=3.6.7
Linux Linux kernel=3.6.8
Linux Linux kernel=3.6.9
Linux Linux kernel=3.6.10
Linux Linux kernel=3.6.11
Linux Linux kernel=3.7
Linux Linux kernel=3.7.1
Linux Linux kernel=3.7.2
Linux Linux kernel=3.7.3
Linux Linux kernel=3.7.4
Linux Linux kernel=3.7.5
Linux Linux kernel=3.7.6
Linux Linux kernel=3.7.7
Linux Linux kernel=3.7.8
Linux Linux kernel=3.7.9
Linux Linux kernel=3.7.10
Linux Linux kernel=3.8.0
Linux Linux kernel=3.8.1
Linux Linux kernel=3.8.2
Linux Linux kernel=3.8.3
Linux Linux kernel=3.8.4
Linux Linux kernel=3.8.5
Linux Linux kernel=3.8.6
Linux Linux kernel=3.8.7
Linux Linux kernel=3.8.8
Linux Linux kernel=3.8.9
Linux Linux kernel=3.8.10
Linux Linux kernel=3.8.11
Linux Linux kernel=3.8.12
Linux Linux kernel=3.8.13
Linux Linux kernel=3.9-rc1
Linux Linux kernel=3.9-rc2
Linux Linux kernel=3.9-rc3
Linux Linux kernel=3.9-rc4
Linux Linux kernel=3.9-rc5
Linux Linux kernel=3.9-rc6
Linux Linux kernel=3.9-rc7
Linux Linux kernel=3.9.0
Linux Linux kernel=3.9.0
Linux Linux kernel=3.9.1
Linux Linux kernel=3.9.1
Linux Linux kernel=3.9.2
Linux Linux kernel=3.9.2
Linux Linux kernel=3.9.3
Linux Linux kernel=3.9.3
Linux Linux kernel=3.9.4
Linux Linux kernel=3.9.4
Linux Linux kernel=3.9.5
Linux Linux kernel=3.9.5
Linux Linux kernel=3.9.6
Linux Linux kernel=3.9.6
Linux Linux kernel=3.9.7
Linux Linux kernel=3.9.7
Linux Linux kernel=3.9.8
Linux Linux kernel=3.9.8
Linux Linux kernel=3.9.9
Linux Linux kernel=3.9.9
Linux Linux kernel=3.9.10
Linux Linux kernel=3.9.10
Linux Linux kernel=3.9.11
Linux Linux kernel=3.9.11
Linux Linux kernel=3.10
Linux Linux kernel=3.10.0
Linux Linux kernel=3.10.1
Linux Linux kernel=3.10.1
Linux Linux kernel=3.10.2
Linux Linux kernel=3.10.2
Linux Linux kernel=3.10.3
Linux Linux kernel=3.10.3
Linux Linux kernel=3.10.4
Linux Linux kernel=3.10.4
Linux Linux kernel=3.10.5
Linux Linux kernel=3.10.5
Linux Linux kernel=3.10.6
Linux Linux kernel=3.10.6
Linux Linux kernel=3.10.7
Linux Linux kernel=3.10.7
Linux Linux kernel=3.10.8
Linux Linux kernel=3.10.8
Linux Linux kernel=3.10.9
Linux Linux kernel=3.10.9
Linux Linux kernel=3.10.10
Linux Linux kernel=3.10.11
Linux Linux kernel=3.10.12
Linux Linux kernel=3.10.13
Linux Linux kernel=3.10.14
Linux Linux kernel=3.10.15
Linux Linux kernel=3.10.16
Linux Linux kernel=3.10.17
Linux Linux kernel=3.10.18
Linux Linux kernel=3.10.19
Linux Linux kernel=3.10.20
Linux Linux kernel=3.10.21
Linux Linux kernel=3.10.22
Linux Linux kernel=3.10.23
Linux Linux kernel=3.10.24
Linux Linux kernel=3.10.25
Linux Linux kernel=3.10.26
Linux Linux kernel=3.10.27
Linux Linux kernel=3.10.28
Linux Linux kernel=3.10.29
Linux Linux kernel=3.11
Linux Linux kernel=3.11.1
Linux Linux kernel=3.11.2
Linux Linux kernel=3.11.3
Linux Linux kernel=3.11.4
Linux Linux kernel=3.11.5
Linux Linux kernel=3.11.6
Linux Linux kernel=3.11.7
Linux Linux kernel=3.11.8
Linux Linux kernel=3.11.9
Linux Linux kernel=3.11.10
Linux Linux kernel=3.12
Linux Linux kernel=3.12.1
Linux Linux kernel=3.12.2
Linux Linux kernel=3.12.3
Linux Linux kernel=3.12.4
Linux Linux kernel=3.12.5
Linux Linux kernel=3.12.6
Linux Linux kernel=3.12.7
Linux Linux kernel=3.12.8
Linux Linux kernel=3.12.9
Linux Linux kernel=3.12.10
Linux Linux kernel=3.12.11
Linux Linux kernel=3.12.12
Linux Linux kernel=3.12.13
Linux Linux kernel=3.12.14
Linux Linux kernel=3.12.15
Linux Linux kernel=3.12.16
Linux Linux kernel=3.12.17
Linux Linux kernel=3.13
Linux Linux kernel=3.13.1
Linux Linux kernel=3.13.2
Linux Linux kernel=3.13.3
Linux Linux kernel=3.13.4
Linux Linux kernel=3.13.5
Linux Linux kernel=3.13.6
Linux Linux kernel=3.13.7
Linux Linux kernel=3.13.8
Linux Linux kernel=3.13.9
Linux Linux kernel=3.13.10
Linux Linux kernel=3.13.11
Linux Linux kernel=3.14
Linux Linux kernel=3.14-rc1
Linux Linux kernel=3.14-rc2
Linux Linux kernel=3.14-rc3
Linux Linux kernel=3.14-rc4
Linux Linux kernel=3.14-rc5
Linux Linux kernel=3.14-rc6
Linux Linux kernel=3.14-rc7
Linux Linux kernel=3.14-rc8
Linux Linux kernel=3.14.1
Linux Linux kernel=3.14.2
Linux Linux kernel=3.14.3
Linux Linux kernel=3.14.4
Linux Linux kernel=3.14.5
Linux Linux kernel=3.15
Linux Linux kernel=3.15.1
Linux Linux kernel=3.15.2
Linux Linux kernel=3.15.3
Linux Linux kernel=3.15.4
Linux Linux kernel=3.15.5
Linux Linux kernel=3.15.6
Linux Linux kernel=3.15.7
Linux Linux kernel=3.15.8
Linux Linux kernel=3.16.0
Linux Linux kernel=3.16.1
Linux Linux kernel=3.17
Linux Linux kernel=3.17.1
Linux Linux kernel=3.17.2
Linux Linux kernel=3.17.3
Linux Linux kernel=3.17.3
Linux Linux kernel=3.17.4
Linux Linux kernel=3.18-rc1
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-1
Remediation
Event History
Dec 10, 2014
Data Sourced
via Red Hat·06:48 PM
DescriptionSeverityAffected Software
Dec 17, 2014
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:08 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:05 AM
RemedyDescriptionSeverityAffected Software
Feb 23, 2025
Data Sourced
via Debian·01:59 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-8133?
CVE-2014-8133 is classified as a medium severity vulnerability.
2
How do I fix CVE-2014-8133?
To fix CVE-2014-8133, upgrade your Linux kernel to a version higher than 3.18.1.
3
What types of systems are affected by CVE-2014-8133?
CVE-2014-8133 affects local users on Linux systems running kernels up to version 3.18.1.
4
Is CVE-2014-8133 remotely exploitable?
No, CVE-2014-8133 can only be exploited by local users who have access to the affected system.
5
What are the potential impacts of CVE-2014-8133?
The vulnerability allows local users to bypass ASLR protection, potentially leading to privilege escalation.