The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Sep 5, 2017 |
| Debian | — | Upgrade linux | Sep 25, 2017 | Sep 5, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernelUpgrade kernel-oriUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Nov 30, 2017 | Sep 5, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 8, 2018 | Aug 20, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Apr 11, 2018 | Sep 5, 2017 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-devel | Oct 30, 2017 | Sep 5, 2017 |
| Ubuntu | — | Upgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-97-lowlatencyUpgrade linux-image-4.4.0-1077-snapdragonUpgrade linux-image-4.4.0-97-powerpc-smpUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-awsUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1008-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-97-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-1038-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.4.0-97-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-97-powerpc64-embUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-4.4.0-1075-raspi2Upgrade linux-image-4.4.0-1032-gkeUpgrade linux-image-4.4.0-97-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-4.4.0-97-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-smp | Oct 11, 2017 | Sep 5, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 5, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub