Wind River Support Network

HomeDefectsSCP7-711
Fixed

SCP7-711 : Security Advisory - linux - CVE-2017-16994

Created: Nov 28, 2017    Updated: Aug 14, 2019
Resolved Date: Aug 14, 2019
Found In Version: 7.0.0.5
Fix Version: 7.0.0.27
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Kernel

Description

The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.

A community patch is available at:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c
Live chat
Online