PT-2017-14667 · Linux+3 · Linux Kernel+3

Published 2017-11-27 · Updated 2018-07-09 · CVE-2017-16994

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.2

Description The issue allows local users to obtain sensitive information from uninitialized kernel memory. This is due to the walk hugetlb range function in mm/pagewalk.c mishandling holes in hugetlb ranges. The mincore() system call can be used in a crafted way to exploit this.

Recommendations For versions prior to 4.14.2, update to version 4.14.2 or later to resolve the issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2017-2771

ALT-PU-2018-1991

CVE-2017-16994

MGASA-2017-0463

MGASA-2017-0466

MGASA-2017-0467

MGASA-2018-0062

MGASA-2018-0063

MGASA-2018-0064

OPENSUSE-SU-2017_3358-1

OPENSUSE-SU-2017_3359-1

RHSA-2018:0502

SUSE-SU-2017:3398-1

SUSE-SU-2017:3410-1

SUSE-SU-2018:0213-1

USN-3617-1

USN-3617-2

USN-3617-3

USN-3619-1

USN-3619-2

USN-3632-1

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 357

• 🔥 https://exploit-db.com/exploits/44304 · Exploit
• 🔥 https://exploit-db.com/exploits/43178 · Exploit
• 🔥 https://exploit-db.com/exploits/44303 · Exploit
• 🔥 https://bugs.chromium.org/p/project-zero/issues/detail?id=1431 · Exploit
• https://github.com/torvalds/linux/commit/373c4557d2aa362702c4c2d41288fb1e54990b7c · Patch
• https://ubuntu.com/security/CVE-2017-16536 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2018-4108.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16537 · Vendor Advisory
• https://usn.ubuntu.com/3619-2 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0467 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1000026 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0466 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-17448 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3619-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-6927 · Vendor Advisory