Wind River Support Network

HomeDefectsLIN7-9189
Fixed

LIN7-9189 : Security Advisory - linux - CVE-2017-16994

Created: Nov 28, 2017    Updated: Sep 8, 2018
Resolved Date: Dec 4, 2017
Found In Version: 7.0
Fix Version: 7.0.0.27
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Kernel

Description

The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.

A community patch is available at:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c

Other Downloads


CVEs


Live chat
Online