CVE-2017-16994

2017-11-2700:00:00

ubuntu.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

9.6%

JSON

The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before
4.14.2 mishandles holes in hugetlb ranges, which allows local users to
obtain sensitive information from uninitialized kernel memory via crafted
use of the mincore() system call.

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchlinux< 4.13.0-38.43UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-119.143UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1016.16UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1054.63UNKNOWN
ubuntu16.04noarchlinux-azure< 4.13.0-1014.17UNKNOWN
ubuntu16.04noarchlinux-gcp< 4.13.0-1012.16UNKNOWN
ubuntu16.04noarchlinux-hwe< 4.13.0-38.43~16.04.1UNKNOWN
ubuntu18.04noarchlinux-hwe-edge< 4.18.0-8.9~18.04.1UNKNOWN
ubuntu16.04noarchlinux-hwe-edge< 4.13.0-38.43~16.04.1UNKNOWN
ubuntu16.04noarchlinux-kvm< 4.4.0-1020.25UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	17.10	noarch	linux	< 4.13.0-38.43	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-119.143	UNKNOWN
ubuntu	14.04	noarch	linux-aws	< 4.4.0-1016.16	UNKNOWN
ubuntu	16.04	noarch	linux-aws	< 4.4.0-1054.63	UNKNOWN
ubuntu	16.04	noarch	linux-azure	< 4.13.0-1014.17	UNKNOWN
ubuntu	16.04	noarch	linux-gcp	< 4.13.0-1012.16	UNKNOWN
ubuntu	16.04	noarch	linux-hwe	< 4.13.0-38.43~16.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-hwe-edge	< 4.18.0-8.9~18.04.1	UNKNOWN
ubuntu	16.04	noarch	linux-hwe-edge	< 4.13.0-38.43~16.04.1	UNKNOWN
ubuntu	16.04	noarch	linux-kvm	< 4.4.0-1020.25	UNKNOWN