CVE-2013-0914: Linux Kernel

Low severity, CVSS 3.6. EPSS: 0.5% chance of exploitation in the next 30 days.

The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call.

Affected products

• Linux Linux Kernel: up to and including 3.8.3; version 3.8.0 only; version 3.8.1 only; version 3.8.2 only

Published 2013-03-22. Last modified 2026-06-16.