PT-2019-2625
CVE-2019-12817
·
تاريخ النشر
2019-06-12
·
تاريخ التحديث
2022-04-18
الوصف من
CVSS 3.1
7.0
عاليةالمقاييسAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.1.15 for powerpc
Description
The issue is related to a bug in the arch/powerpc/mm/mmu context book3s64.c component of the Linux kernel for powerpc systems. This bug allows unrelated processes to potentially read or write to each other's virtual memory under certain conditions, specifically when an mmap operation is performed above 512 TB. The vulnerability is caused by a buffer overflow in memory, which can be exploited to access or damage the memory content of other processes in the system using the mmap function.
Recommendations
For Linux kernel versions prior to 5.1.15 for powerpc, update to version 5.1.15 or later to resolve the issue.
As a temporary workaround, consider restricting the use of the mmap function above 512 TB to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾