Wind River Support Network

HomeDefectsLIN8-8252
Fixed

LIN8-8252 : Security Advisory - linux - CVE-2017-16994

Created: Nov 28, 2017    Updated: Dec 3, 2018
Resolved Date: Nov 30, 2017
Found In Version: 8.0.0.23
Fix Version: 8.0.0.24
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Kernel

Description

The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.

A community patch is available at:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c

Other Downloads


CVEs


Live chat
Online