QwikSec

Security Database

CVE

CWE

Training

CVE-2017-16994

Published: Nov 27, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_UBUNTU

vendor-advisory

x_refsource_UBUNTU

https://bugs.chromium.org/p/project-zero/issues/detail?id=1431

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

exploit

x_refsource_EXPLOIT-DB

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_UBUNTU

https://github.com/torvalds/linux/commit/373c4557d2aa362702c4c2d41288fb1e54990b7c

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.