Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:26831
HistorySep 21, 2020 - 6:21 a.m.

Denial Of Service (DoS)

2020-09-2106:21:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
25

EPSS

0

Percentile

5.1%

kernel is vulnerble to denial of service. A local user with the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory and causes the kernel to allocate memory that is not accounted for. With this vulnerability, continual reading of the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.