PT-2019-2625
CVE-2019-12817
·
Publicado
2019-06-12
·
Atualizado
2022-04-18
Descrição por
CVSS 3.1
7.0
AltaMétricasAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.1.15 for powerpc
Description
The issue is related to a bug in the arch/powerpc/mm/mmu context book3s64.c component of the Linux kernel for powerpc systems. This bug allows unrelated processes to potentially read or write to each other's virtual memory under certain conditions, specifically when an mmap operation is performed above 512 TB. The vulnerability is caused by a buffer overflow in memory, which can be exploited to access or damage the memory content of other processes in the system using the mmap function.
Recommendations
For Linux kernel versions prior to 5.1.15 for powerpc, update to version 5.1.15 or later to resolve the issue.
As a temporary workaround, consider restricting the use of the mmap function above 512 TB to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾