The walkhugetlbrange function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.
[
{
"id": "CVE-2017-16994-3081a865",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"189244847156182048223733344950903238595",
"167810419443358391130409369491065082479",
"121032383847917567903706233176566937442",
"111927387336954660439230851962924953360",
"78781909895294734025045049525380663535"
]
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@373c4557d2aa362702c4c2d41288fb1e54990b7c",
"signature_type": "Line",
"target": {
"file": "mm/pagewalk.c"
}
},
{
"id": "CVE-2017-16994-4dde0404",
"signature_version": "v1",
"digest": {
"function_hash": "107216152594529212706811942891610903988",
"length": 560.0
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@373c4557d2aa362702c4c2d41288fb1e54990b7c",
"signature_type": "Function",
"target": {
"file": "mm/pagewalk.c",
"function": "walk_hugetlb_range"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-16994.json"
[
{
"id": "CVE-2017-16994-7378c1a8",
"signature_version": "v1",
"digest": {
"function_hash": "107216152594529212706811942891610903988",
"length": 560.0
},
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/373c4557d2aa362702c4c2d41288fb1e54990b7c",
"signature_type": "Function",
"target": {
"file": "mm/pagewalk.c",
"function": "walk_hugetlb_range"
}
},
{
"id": "CVE-2017-16994-8938ece8",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"189244847156182048223733344950903238595",
"167810419443358391130409369491065082479",
"121032383847917567903706233176566937442",
"111927387336954660439230851962924953360",
"78781909895294734025045049525380663535"
]
},
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/373c4557d2aa362702c4c2d41288fb1e54990b7c",
"signature_type": "Line",
"target": {
"file": "mm/pagewalk.c"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-16994.json"