Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | May 11, 2017 | Apr 10, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Apr 10, 2017 |
| Debian | — | Upgrade linux | May 1, 2017 | Apr 10, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 26, 2018 | Apr 8, 2017 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 3, 2017 | Apr 10, 2017 |
| Suse | — | Upgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2 | May 2, 2017 | Apr 10, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-78-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-129-genericUpgrade linux-image-gkeUpgrade linux-image-3.13.0-129-powerpc-smpUpgrade linux-image-4.4.0-1058-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-3.13.0-129-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-129-powerpc64-embUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-4.4.0-1055-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-4.10.0-1005-raspi2Upgrade linux-image-4.4.0-78-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-78-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-4.4.0-78-lowlatencyUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.10.0-21-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-129-lowlatencyUpgrade linux-image-4.4.0-1013-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1017-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-129-powerpc-e500Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-78-generic-lpaeUpgrade linux-image-3.13.0-129-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-129-generic-lpaeUpgrade linux-image-4.4.0-78-powerpc-smpUpgrade linux-image-4.10.0-21-genericUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-78-genericUpgrade linux-image-4.10.0-21-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-lowlatency-hwe-16.04 | May 18, 2017 | Apr 10, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub