← back
CVE-2017-16994

CVE-2017-16994

EPSS 2.1%
The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.
Affected products
n/a · n/a
public PoCs found — 5
githubgithub.com/jedai47/CVE-2017-16994★ 0cve_referencewww.exploit-db.com/exploits/43178/unverifiedexploitdbwww.exploit-db.com/exploits/44304unverifiedexploitdbwww.exploit-db.com/exploits/43178unverifiedexploitdbwww.exploit-db.com/exploits/44303unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7chttps://access.redhat.com/errata/RHSA-2018:0502https://bugs.chromium.org/p/project-zero/issues/detail?id=1431https://github.com/torvalds/linux/commit/373c4557d2aa362702c4c2d41288fb1e54990b7chttps://usn.ubuntu.com/3617-1/https://usn.ubuntu.com/3617-2/https://usn.ubuntu.com/3617-3/https://usn.ubuntu.com/3619-1/https://usn.ubuntu.com/3619-2/https://usn.ubuntu.com/3632-1/https://www.exploit-db.com/exploits/43178/http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2