Lucene search

K
osvGoogleOSV:USN-5211-1
HistoryJan 06, 2022 - 3:56 a.m.

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerability

2022-01-0603:56:57
Google
osv.dev
16
linux kernel
hugetlb
nadav amit
tlb flushes
data leak
data alteration
local attacker
software
security vulnerability

AI Score

5.7

Confidence

High

EPSS

0

Percentile

9.7%

Nadav Amit discovered that the hugetlb implementation in the Linux kernel
did not perform TLB flushes under certain conditions. A local attacker
could use this to leak or alter data from other processes that use huge
pages.