What is CVE-2014-9585?

CVE-2014-9585 is a Low severity Linux kernel vulnerability with a CVSS score of 2.1 out of 10. CVE-2014-9585 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2014-9585?

CVE-2014-9585 has a CVSS score of 2.1 out of 10, rated Low severity. The vector string is AV:L/AC:L/Au:N/C:N/I:P/A:N.

Is there a patch available for CVE-2014-9585?

Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2014-9585 patch availability.

Is CVE-2014-9585 actively exploited?

CVE-2014-9585 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2014-9585

Low

The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.

Package Linux Kernel

Published 2015-01-09

Last modified 2026-05-06

CVSS version 2.0

Patch available

Awaiting data

CVSS 2.0 score

2.1

out of 10

Low

Attack Vector

Local

Attack Complexity

Low

Privileges Required

User Interaction

Scope

Confidentiality

Low

Integrity

Availability

None

Vector string

AV:L/AC:L/Au:N/C:N/I:P/A:N

References

24 total

Openwall
http://www.openwall.com/lists/oss-security/2014/12/09/10

Exploit Mailing List Third Party Advisory
Kernel Git
http://git.kernel.org/?p=linux/kernel/git/luto/linux.git%3Ba=commit%3Bh=bc3b94c31d65e761ddfe150d02932c65971b74e2
Kernel Git
http://git.kernel.org/?p=linux/kernel/git/tip/tip.git%3Ba=commit%3Bh=fbe1bf140671619508dfa575d74a185ae53c5dbb
Lists
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148480.html

Mailing List Third Party Advisory
Lists
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html

Mailing List Third Party Advisory

Showing 5 of 24 references View all on NVD

Details

CVE ID CVE-2014-9585

Severity Low

CVSS score 2.1 / 10

CVSS version 2.0

Published 2015-01-09

Modified 2026-05-06

KEV No

Patch Awaiting data

Package linux

Frequently asked questions

What is CVE-2014-9585?

CVE-2014-9585 is a Low severity Linux kernel vulnerability with a CVSS score of 2.1 out of 10 . CVE-2014-9585 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2014-9585?

CVE-2014-9585 has a CVSS score of 2.1 out of 10, rated Low severity (CVSS 2.0). The vector string is AV:L/AC:L/Au:N/C:N/I:P/A:N.
Is there a patch available for CVE-2014-9585?

Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2014-9585 patch availability.
Is CVE-2014-9585 actively exploited?

No. CVE-2014-9585 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.