The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Aug 28, 2019 | Sep 5, 2017 |
| Debian | debian-upgrade-linux | Sep 25, 2017 | Sep 5, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-kernelhuawei-euleros-2_0_sp1-upgrade-kernel-debughuawei-euleros-2_0_sp1-upgrade-kernel-debuginfohuawei-euleros-2_0_sp1-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp1-upgrade-kernel-develhuawei-euleros-2_0_sp1-upgrade-kernel-headershuawei-euleros-2_0_sp1-upgrade-kernel-orihuawei-euleros-2_0_sp1-upgrade-kernel-toolshuawei-euleros-2_0_sp1-upgrade-kernel-tools-libshuawei-euleros-2_0_sp1-upgrade-perfhuawei-euleros-2_0_sp1-upgrade-python-perf | Nov 30, 2017 | Sep 5, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Feb 8, 2018 | Aug 20, 2017 |
| Redhat_linux | — | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Apr 11, 2018 | Sep 5, 2017 |
| Suse | — | suse-upgrade-kernel-defaultsuse-upgrade-kernel-docssuse-upgrade-kernel-ec2suse-upgrade-kernel-ec2-develsuse-upgrade-kernel-ec2-extra | Oct 30, 2017 | Sep 5, 2017 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-142-genericubuntu-upgrade-linux-image-3-13-0-142-generic-lpaeubuntu-upgrade-linux-image-3-13-0-142-lowlatencyubuntu-upgrade-linux-image-3-13-0-142-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-142-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-142-powerpc-smpubuntu-upgrade-linux-image-3-13-0-142-powerpc64-embubuntu-upgrade-linux-image-3-13-0-142-powerpc64-smpubuntu-upgrade-linux-image-4-4-0-1008-kvmubuntu-upgrade-linux-image-4-4-0-1032-gkeubuntu-upgrade-linux-image-4-4-0-1038-awsubuntu-upgrade-linux-image-4-4-0-1075-raspi2ubuntu-upgrade-linux-image-4-4-0-1077-snapdragonubuntu-upgrade-linux-image-4-4-0-97-genericubuntu-upgrade-linux-image-4-4-0-97-generic-lpaeubuntu-upgrade-linux-image-4-4-0-97-lowlatencyubuntu-upgrade-linux-image-4-4-0-97-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-97-powerpc-smpubuntu-upgrade-linux-image-4-4-0-97-powerpc64-embubuntu-upgrade-linux-image-4-4-0-97-powerpc64-smpubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon | Oct 11, 2017 | Sep 5, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Sep 5, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub