PT-2017-17845
CVE-2017-7616
·
تاريخ النشر
2017-04-10
·
تاريخ التحديث
2018-07-09
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.10.9
Description
The issue is related to incorrect error handling in the set mempolicy and mbind compat syscalls in mm/mempolicy.c. This allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation.
Recommendations
For Linux kernel versions prior to 4.10.9, update to version 4.10.9 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾