CVE-2017-15127

Published: Jan 14, 2018Modified: Nov 21, 2024

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could trigger a local denial of service (BUG).

Affected (3)

Products: Linux: Linux Kernel · Redhat: Enterprise Linux, Enterprise Mrg

1 product

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 4.13

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Mrg	Version 2.0

Related CWEs

CWE-460

Improper Cleanup on Thrown Exception

The product does not clean up its state or incorrectly cleans up its state when an exception is thrown, leading to unexpected state or control flow.

References (14)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5af10dfd0afc559bb4b0f7e3e8227a1578333995

Source: secalert@redhat.com

PatchVendor Advisory

http://www.securityfocus.com/bid/102517

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2018:0676

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2018:1062

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2017-15127

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1525218

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://github.com/torvalds/linux/commit/5af10dfd0afc559bb4b0f7e3e8227a1578333995

Source: secalert@redhat.com

PatchThird Party Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5af10dfd0afc559bb4b0f7e3e8227a1578333995