CVE-2017-7889
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2017-7889
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7889.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-7889
- Related
- Published
- 2017-04-17T00:59:00Z
- Modified
- 2024-09-18T01:00:22Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIGSTRICTDEVMEM protection mechanism, which allows local users to read or write to kernel memory locations in the first megabyte (and bypass slab-allocation access restrictions) via an application that opens the /dev/mem file, related to arch/x86/mm/init.c and drivers/char/mem.c.
- References
-
- http://www.debian.org/security/2017/dsa-3945
- http://www.securityfocus.com/bid/97690
- https://access.redhat.com/errata/RHSA-2017:1842
- https://access.redhat.com/errata/RHSA-2017:2077
- https://access.redhat.com/errata/RHSA-2017:2669
- https://access.redhat.com/errata/RHSA-2018:1854
- http://www.openwall.com/lists/oss-security/2017/04/16/4
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a4866aa812518ed1a37d8ea0c881dc946409de94
- https://github.com/torvalds/linux/commit/a4866aa812518ed1a37d8ea0c881dc946409de94
- https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=b8f254aa17f720053054c4ecff3920973a83b9d6
- https://usn.ubuntu.com/3583-1/
- https://usn.ubuntu.com/3583-2/
- https://security-tracker.debian.org/tracker/CVE-2017-7889
Affected packages
Debian:11 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source