Wind River Support Network

HomeDefectsLIN9-5857
Fixed

LIN9-5857 : Security Advisory - linux - CVE-2017-16994

Created: Nov 28, 2017    Updated: Dec 3, 2018
Resolved Date: Dec 4, 2017
Found In Version: unknown
Fix Version: 9.0.0.13
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Kernel

Description

The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.

A community patch is available at:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c

Other Downloads


CVEs


Live chat
Online