PT-2019-2625 · Linux+5 · Linux Kernel+5
Michael Ellerman
·
Publicado
2019-06-12
·
Atualizado
2022-04-18
·
CVE-2019-12817
CVSS v3.1
7.0
Alta
| Vetor | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.1.15 for powerpc
Description
The issue is related to a bug in the arch/powerpc/mm/mmu context book3s64.c component of the Linux kernel for powerpc systems. This bug allows unrelated processes to potentially read or write to each other's virtual memory under certain conditions, specifically when an mmap operation is performed above 512 TB. The vulnerability is caused by a buffer overflow in memory, which can be exploited to access or damage the memory content of other processes in the system using the mmap function.
Recommendations
For Linux kernel versions prior to 5.1.15 for powerpc, update to version 5.1.15 or later to resolve the issue.
As a temporary workaround, consider restricting the use of the mmap function above 512 TB to minimize the risk of exploitation.
Correção
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu