PT-2017-19065
CVE-2017-9605
·
تاريخ النشر
2017-06-13
·
تاريخ التحديث
2018-07-09
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.11.5
Description
The issue concerns the
vmw gb surface define ioctl function, accessible via the DRM IOCTL VMW GB SURFACE CREATE ioctl call, which does not properly initialize a backup handle variable. This allows local users to obtain sensitive information from uninitialized kernel memory by creating a GB surface with a previously allocated DMA buffer as a backup buffer, and then making a crafted ioctl call.Recommendations
For Linux kernel versions prior to 4.11.5, update to version 4.11.5 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾