Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Hector Marco Gisbert

#48914of 53,633
5Total CVSS
Vulnerabilities · 1
PT-2015-5374
5.0
2015-02-13
Linux · Linux Kernel · CVE-2015-1593
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 3.19.1 **Description** The issue is related to the stack randomization feature in the Linux kernel, which uses incorrect data types for the results of bitwise left-shift operations. This makes it easier for attackers to bypass the Address Space Layout Randomization (ASLR) protection mechanism by predicting the address of the top of the stack. The problem is associated with the `randomize stack top` function in `fs/binfmt elf.c` and the `stack maxrandom size` function in `arch/x86/mm/mmap.c`. **Recommendations** For Linux kernel versions prior to 3.19.1, update to version 3.19.1 or later to resolve the issue.