CVE-2017-16994

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.1%

from disclosure to weapon0 days

Published on NVDNov 27

1st PoCNov 24

exploitation probability

2.1%top 20% of all CVEs

observed exploitation

nono source reports it

5 public exploit(s)

The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.

Affected products

n/a · n/a

public PoCs found — 5

githubgithub.com/jedai47/CVE-2017-16994★ 0 cve_referencewww.exploit-db.com/exploits/43178/unverified exploitdbwww.exploit-db.com/exploits/44304unverified exploitdbwww.exploit-db.com/exploits/43178unverified exploitdbwww.exploit-db.com/exploits/44303unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c https://access.redhat.com/errata/RHSA-2018:0502 https://bugs.chromium.org/p/project-zero/issues/detail?id=1431 https://github.com/torvalds/linux/commit/373c4557d2aa362702c4c2d41288fb1e54990b7c https://usn.ubuntu.com/3617-1/https://usn.ubuntu.com/3617-2/https://usn.ubuntu.com/3617-3/https://usn.ubuntu.com/3619-1/https://usn.ubuntu.com/3619-2/https://usn.ubuntu.com/3632-1/https://www.exploit-db.com/exploits/43178/http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2