CVE-2014-9419

The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.

Published: 2014-12-25 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2014-9419 is rated Low Risk (20.9/100): CVSS Low severity, with low exploitation likelihood (EPSS 0.44%). Mandatory action: Monitor for updates and reassess as exploit intelligence or EPSS changes.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2014-9419

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 0.06% 0.44% +0.38%
2 2025-03-30 0.24% 0.06% -0.19%
3 2025-03-29 0.24%

Full EPSS history (6 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2014-9419

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
2.1 2.0 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N Click to expand
Access vector (AV:L)
Requires local access to the target system.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:N)
No availability impact.
3.9 2.9 [email protected]

Weakness enumeration for CVE-2014-9419

OS Trackers for CVE-2014-9419

vendor priority summary link
debian not yet assigned CVE-2014-9419 not yet assigned priority: Debian including 1 source packages (linux), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2014-9419
redhat low https://access.redhat.com/security/cve/CVE-2014-9419
ubuntu medium CVE-2014-9419 medium priority: Ubuntu including 102 source packages (linux, linux-armadaxp, …), 921 status rows across 16 suites (artful, bionic, focal, jammy, lucid, noble, plucky, precise, trusty, upstream, utopic, vivid, wily, xenial, yakkety, zesty): DNE 625, not-affected 140, released 109, ignored 47. https://ubuntu.com/security/CVE-2014-9419

Affected software / configurations for CVE-2014-9419

Vendor Product Version Raw CPE
linux linux_kernel <= 3.18.1 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

References for CVE-2014-9419

URL Tags
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f647d7c155f069c1a068030255c300663516420e
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html
http://rhn.redhat.com/errata/RHSA-2015-1081.html
http://www.debian.org/security/2015/dsa-3128
http://www.mandriva.com/security/advisories?name=MDVSA-2015:058
http://www.openwall.com/lists/oss-security/2014/12/25/1
http://www.securityfocus.com/bid/71794
http://www.ubuntu.com/usn/USN-2515-1
http://www.ubuntu.com/usn/USN-2516-1
http://www.ubuntu.com/usn/USN-2517-1
http://www.ubuntu.com/usn/USN-2518-1
http://www.ubuntu.com/usn/USN-2541-1
http://www.ubuntu.com/usn/USN-2542-1
https://bugzilla.redhat.com/show_bug.cgi?id=1177260 Vendor Advisory
https://github.com/torvalds/linux/commit/f647d7c155f069c1a068030255c300663516420e
cvelogic Threat Intelligence