PT-2017-17845 · Linux+5 · Linux Kernel+5

Guoygang

+1

·

Published

2017-04-10

·

Updated

2018-07-09

·

CVE-2017-7616

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.10.9
Description The issue is related to incorrect error handling in the set mempolicy and mbind compat syscalls in mm/mempolicy.c. This allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation.
Recommendations For Linux kernel versions prior to 4.10.9, update to version 4.10.9 or later to resolve the issue.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-388

Related Identifiers

ALT-PU-2017-1469
ALT-PU-2018-1991
CESA-2017_1842
CESA-2018_1854
CVE-2017-7616
DLA-922-1
OPENSUSE-SU-2017_1140-1
OPENSUSE-SU-2017_1215-1
RHSA-2017:1842
RHSA-2017:2077
RHSA-2017_1842
RHSA-2017_2077
RHSA-2018:1854
RHSA-2018_1854
SUSE-SU-2017:1247-1
SUSE-SU-2017:1301-1
SUSE-SU-2017:1360-1
SUSE-SU-2017:1853-1
SUSE-SU-2017:1990-1
SUSE-SU-2017:2342-1
SUSE-SU-2017:2525-1
USN-3291-1
USN-3291-2
USN-3291-3
USN-3293-1
USN-3361-1
USN-3406-1
USN-3406-2

Affected Products

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu