Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | May 11, 2017 | Apr 10, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Apr 10, 2017 |
| Debian | — | Upgrade linux | May 1, 2017 | Apr 10, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 26, 2018 | Apr 8, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 3, 2017 | Apr 10, 2017 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade cluster-md-kmp-default | May 2, 2017 | Apr 10, 2017 |
| Ubuntu | — | Upgrade linux-image-3.13.0-129-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-78-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-78-genericUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-129-powerpc-e500mcUpgrade linux-image-4.4.0-78-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-4.10.0-21-generic-lpaeUpgrade linux-image-4.10.0-21-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-129-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-78-powerpc-e500mcUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-78-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1017-awsUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-129-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-129-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-3.13.0-129-powerpc64-embUpgrade linux-image-4.4.0-78-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-3.13.0-129-genericUpgrade linux-image-4.4.0-1013-gkeUpgrade linux-image-4.10.0-21-lowlatencyUpgrade linux-image-4.4.0-1058-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-78-powerpc64-embUpgrade linux-image-3.13.0-129-powerpc-smpUpgrade linux-image-4.4.0-1055-raspi2Upgrade linux-image-4.10.0-1005-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04 | May 18, 2017 | Apr 10, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub