Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | May 11, 2017 | Apr 10, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Apr 10, 2017 |
| Debian | — | Upgrade linux | May 1, 2017 | Apr 10, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 26, 2018 | Apr 8, 2017 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 3, 2017 | Apr 10, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade cluster-md-kmp-default | May 2, 2017 | Apr 10, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-78-powerpc-smpUpgrade linux-image-4.10.0-21-genericUpgrade linux-image-4.4.0-78-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-129-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-78-genericUpgrade linux-image-4.10.0-21-generic-lpaeUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-129-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-129-powerpc-smpUpgrade linux-image-4.4.0-1017-awsUpgrade linux-image-4.10.0-1005-raspi2Upgrade linux-image-4.4.0-1055-raspi2Upgrade linux-image-4.4.0-78-powerpc64-embUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-78-powerpc-e500mcUpgrade linux-image-4.4.0-1058-snapdragonUpgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-78-powerpc64-smpUpgrade linux-image-3.13.0-129-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-129-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-4.4.0-1013-gkeUpgrade linux-image-3.13.0-129-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-129-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.10.0-21-lowlatencyUpgrade linux-image-4.4.0-78-lowlatencyUpgrade linux-image-3.13.0-129-powerpc-e500Upgrade linux-image-lowlatency | May 18, 2017 | Apr 10, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub