Posted by Hector Marco-Gisbert on Apr 21

A bug in Linux ASLR implementation has been found. The issue is that the mmap
base address for processes is not properly randomized on some architectures due
to an improper bit-mask manipulation. Affected systems have reduced the mmap
area entropy of the processes by half.

The number of possible locations are reduced by 50%, which for example will
reduce the cost of brute force attacks.

PowerPC, Sparc64 and ARM have 18 bits of entropy….