VULNERABILITY INTELLIGENCE
CVE-2017-16994
CVSS score5.5 MEDIUM
EPSS probability2.08%
CISA KEVNot currently listed
Published2017-11-27
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Primary references
- cve@mitre.org — Patch
- cve@mitre.org — Release Notes
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org
- cve@mitre.org — Exploit, Issue Tracking, Patch
- cve@mitre.org — Patch
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org