CVE-2017-16994 in Linux Kernel
Summary
The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.
Reservation
11/27/2017
Disclosure
11/27/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 110023 | Linux Kernel pagewalk.c mincore Kernel Memory information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2017-16994 |