CVE-2017-16994
Last modified
CVE-2017-16994 is a vulnerability of currently unknown severity. The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.. EPSS estimates a 2.08% chance of exploitation in the next 30 days.
Description
The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 4.14.2 |
References
- http://www.securityfocus.com/bid/101969Third Party Advisory, VDB Entry
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1431Exploit, Issue Tracking, Patch
- https://www.exploit-db.com/exploits/43178/Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/101969Third Party Advisory, VDB Entry
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1431Exploit, Issue Tracking, Patch
- https://www.exploit-db.com/exploits/43178/Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-16994?
How severe is CVE-2017-16994?
How do I fix CVE-2017-16994?
Are you affected by CVE-2017-16994?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST