Wind River Support Network

HomeDefectsLIN6-14009
Fixed

LIN6-14009 : Security Advisory - linux - CVE-2017-16994

Created: Nov 28, 2017    Updated: Dec 3, 2018
Resolved Date: Dec 25, 2017
Found In Version: 6.0
Fix Version: 6.0.0.36
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Kernel

Description

The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.

A community patch is available at:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c

Other Downloads


Live chat
Online